Windows Restrictions

Enter a name that identifies this configuration.

Select to prevent the device from accessing the internet by means of another wireless device.

Select to disable data roaming when the device is in cellular mode.

Select to prevent the device from establishing VPN connections when not on WiFi.

Select to prevent the device from automatically reporting HotSpot information to Microsoft.

Select to prevent the device from accessing wireless networks.

Select to prevent the device from establishing radio communication with another device by getting close to or touching another device.

Select to prevent the device from accessing a storage card.

Select to prevent the end user from using the Save As command with Office Hub files.

Select to prevent the end user from using the screen capture feature on the device.

Select to prevent the end user from accessing device storage from a desktop by means of a USB.

Select one of the following options:

• Unrestricted - Connection is unlimited and not restricted by usage charges and capacity constraints.
• Fixed - Connection is restricted by usage charges and capacity constraints after a certain data limit.
• Variable - Connection is charged on a per byte basis.

Select one of the following options:

• Disabled - Disable Credential Guard with virtualization-based security.
• Enabled with UEFI lock - Enable Credential Guard with virtualization-based security with Unified Extensible Firmware Interface (UEFI) lock.
• Enabled without lock - Enable Credential Guard with virtualization-based security without UEFI)lock.

Select to prevent Apps/OS to publish to the activity feed.

Select to prevent the end user from using Microsoft accounts for authenticating to non-email services.

Select to prevent the end user from accessing Microsoft's personal assistant.

Select to prevent the end user from enabling sideloading of apps. The default mode when a device is enrolled in MDM is SideLoad enabled.

Select one of the following options:

• Show: Chat icon appears on the taskbar by default. Users can show or hide it in Settings.

• Hide: Chat icon hidden by default. Users can show or hide it in Settings.

• Disabled: Chat icon not displayed, and users cannot show or hide it in Settings.

• Not Configured: Chat icon behaves according to the defaults for your Windows edition.

  Changes do not take effect until restart of the Windows device.

Select to prevent automatic update of apps from the Microsoft Store.

Select one of the following options:

• User in control: allows the user to control the running of apps in the background.
• Force allow: allows running apps in the background.
• Force deny: prevents running of apps in the background.

Select to prevent the end user from saving images Bing Vision searches.

Select to prevent the end user from accessing the Microsoft app store.

Select to prevent display of Action Center alerts above the lock screen.

(Desktop devices only) Select to disable pop-up browser windows in Microsoft Edge browser.

Select this option to enable TenantLockdown to lock all the Windows devices that are enrolled using the Autopilot feature.

Select to turn on internal storage encryption. Once turned on, this option cannot be changed by the UEM server.