Skip to content

Latest commit

 

History

History
114 lines (95 loc) · 43.1 KB

File metadata and controls

114 lines (95 loc) · 43.1 KB
title Common Education device restrictions configuration
description Learn about common device restrictions configuration used by Education organizations in Intune.
ms.date 5/2/2024
ms.topic tutorial
author yegor-a
ms.author egorabr
ms.collection
graph-interactive

Common Education device restrictions

There are many device restriction settings and configuration options you have available. This article summarizes the configurations that are most commonly used for student and teacher devices.

Intune includes device restriction policies that help administrators control a wide range of settings and features. Use these settings on Android, iOS/iPadOS, macOS, and Windows devices and help protect your organization's resources.

To learn more, see Use the settings catalog to configure settings on Windows, iOS/iPadOS, and macOS devices.

Tip

When creating a settings catalog profile in the Microsoft Intune admin center, you can copy a policy name from this article and paste it into the settings picker search field to find the desired policy.

Organization-specific settings catalog policies

Configure these settings to personalize user experience and simplify the Windows sign-in process. Values for these settings should be defined according to the environment.

Category Name Value Notes CSP
Authentication :::no-loc text="Preferred Aad Tenant Domain Name"::: domain Simplifies the sign-in to Windows by automatically appending the domain to the username :::no-loc text="Authentication/PreferredAadTenantDomainName":::
Personalization :::no-loc text="Desktop Image Url"::: url An http or https URL to a jpg, jpeg, or png image that needs to be downloaded and used as the Desktop Image. Or, a file URL to a local image on the file system that needs to be used as the Desktop Image. :::no-loc text="Personalization/DesktopImageUrl":::
Personalization :::no-loc text="Lock Screen Image Url"::: url An http or https URL to a jpg, jpeg, or png image that needs to be downloaded and used as the Lock Screen Image. :::no-loc text="Personalization/LockScreenImageUrl":::
Time Language Settings :::no-loc text="Configure Time Zone"::: timezone Use Timezone column from :::no-loc text="Default Time Zones"::: :::no-loc text="TimeLanguageSettings/ConfigureTimeZone":::

General restrictions

Commonly applied device restrictions in education.

Category Name Value Notes CSP
Above Lock :::no-loc text="Allow Cortana Above Lock"::: Block The system needs to be unlocked for the user to interact with Cortana using speech. :::no-loc text="AboveLock/AllowCortanaAboveLock":::
Above Lock :::no-loc text="Allow Toasts"::: Block Block toast notifications above the device lock screen :::no-loc text="AboveLock/AllowToasts":::
Accounts :::no-loc text="Allow Adding Non Microsoft Accounts Manually"::: Block Block users from adding non-MSA email account. :::no-loc text="Accounts/AllowAddingNonMicrosoftAccountsManually":::
Accounts :::no-loc text="Allow Microsoft Account Connection"::: Block Block users from using a Microsoft Account for non-email related connection authentication and services. :::no-loc text="Accounts/AllowMicrosoftAccountConnection":::
Administrative Templates > System > Power Management > Sleep Settings :::no-loc text="Specify the system hibernate timeout (on battery)"::: Disabled :::no-loc text="Power/HibernateTimeoutOnBattery":::
Administrative Templates > System > Power Management > Sleep Settings :::no-loc text="Specify the system sleep timeout (on battery)"::: Enabled Only enables the setting configuration. :::no-loc text="Power/StandbyTimeoutOnBattery":::
Administrative Templates > System > Power Management > Sleep Settings :::no-loc text="System Sleep Timeout (seconds):"::: 3600 :::no-loc text="Power/StandbyTimeoutOnBattery":::
Administrative Templates > System > Power Management > Sleep Settings :::no-loc text="Specify the system sleep timeout (plugged in)"::: Enabled Only enables the setting configuration. :::no-loc text="Power/StandbyTimeoutPluggedIn":::
Administrative Templates > System > Power Management > Sleep Settings :::no-loc text="System Sleep Timeout (seconds):"::: 3600 :::no-loc text="Power/StandbyTimeoutPluggedIn":::
Administrative Templates > System > Power Management > Video and Display Settings :::no-loc text="Turn off the display (on battery)"::: Enabled :::no-loc text="Power/DisplayOffTimeoutOnBattery":::
Administrative Templates > System > Power Management > Video and Display Settings :::no-loc text="On battery power, turn display off after (seconds)"::: 300 :::no-loc text="Power/DisplayOffTimeoutOnBattery":::
Administrative Templates > System > Power Management > Video and Display Settings :::no-loc text="Turn off the display (plugged in)"::: Enabled :::no-loc text="Power/DisplayOffTimeoutPluggedIn":::
Administrative Templates > System > Power Management > Video and Display Settings :::no-loc text="When plugged in, turn display off after (seconds)"::: 300 :::no-loc text="Power/DisplayOffTimeoutPluggedIn":::
Administrative Templates > System > Removable Storage Access :::no-loc text="All Removable Storage classes: Deny all access"::: Disabled Do not block access to removable storage :::no-loc text="ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2":::
Administrative Templates > Windows Components > Store :::no-loc text="Turn off the Store application"::: Enabled Access to the Store application is denied. :::no-loc text="ADMX_WindowsStore/RemoveWindowsStore_2":::
Bluetooth :::no-loc text="Allow Advertising"::: Block Blocks the device from sending out Bluetooth advertisements. :::no-loc text="Bluetooth/AllowAdvertising":::
Bluetooth :::no-loc text="Allow Discoverable Mode"::: Allow Allow other Bluetooth-enabled devices discover the device. :::no-loc text="Bluetooth/AllowDiscoverableMode":::
Bluetooth :::no-loc text="Allow Prompted Proximal Connections"::: Block Block users on these managed devices from using Swift Pair and other proximity based scenarios. :::no-loc text="Bluetooth/AllowPromptedProximalConnections":::
Camera :::no-loc text="Allow Camera"::: Allowed :::no-loc text="Camera/AllowCamera":::
Connectivity :::no-loc text="Allow Bluetooth"::: Allow Bluetooth. The radio in the Bluetooth control panel will be functional and the user will be able to turn on Bluetooth. :::no-loc text="Connectivity/AllowBluetooth":::
Connectivity :::no-loc text="Allow Cellular Data Roaming"::: Do not allow cellular data roaming. The user cannot turn it on. :::no-loc text="Connectivity/AllowCellularDataRoaming":::
Credential Providers :::no-loc text="Disable Automatic Re Deployment Credentials"::: Disabled Enables local Windows Autopilot Reset :::no-loc text="CredentialProviders/DisableAutomaticReDeploymentCredentials":::
Experience :::no-loc text="Allow Cortana"::: Block :::no-loc text="Experience/AllowCortana":::
Experience :::no-loc text="Allow Manual MDM Unenrollment"::: Block Block the user from deleting the workplace account using the workplace control panel. :::no-loc text="Experience/AllowManualMDMUnenrollment":::
Experience :::no-loc text="Allow Windows Spotlight (User)"::: Block Turn off Windows spotlight on lock screen, Windows Tips, Microsoft consumer features, and other related features. :::no-loc text="Experience/AllowWindowsSpotlight":::
Experience :::no-loc text="Configure Chat Icon"::: Disabled Configures the Teams Chat icon on the taskbar for Windows 11 :::no-loc text="Experience/ConfigureChatIcon":::
Microsoft App Store :::no-loc text="Allow All Trusted Apps"::: Explicit allow unlock. Allow install of any LOB or developer-signed Windows Store app. It must be signed with a certificate chain that can be successfully validated by the local computer. :::no-loc text="ApplicationManagement/AllowAllTrustedApps":::
Microsoft App Store :::no-loc text="Allow Developer Unlock"::: Explicit deny. Block developing Microsoft Store apps or installing them directly from an IDE. :::no-loc text="ApplicationManagement/AllowDeveloperUnlock":::
Microsoft App Store :::no-loc text="Allow Shared User App Data"::: Block Windows app can't share app data with other instances of that app. :::no-loc text="ApplicationManagement/AllowSharedUserAppData":::
Power :::no-loc text="Allow Hibernate"::: Block Windows 11 only :::no-loc text="Power/AllowHibernate":::
Power :::no-loc text="Energy Saver Battery Threshold On Battery"::: 50 Energy Saver is automatically turned on at (and less than) the specified level. :::no-loc text="Power/EnergySaverBatteryThresholdOnBattery":::
Power :::no-loc text="Energy Saver Battery Threshold Plugged In"::: 40 Energy Saver is automatically turned on at (and less than) the specified level. :::no-loc text="Power/EnergySaverBatteryThresholdPluggedIn":::
Power :::no-loc text="Select Lid Close Action On Battery"::: Sleep :::no-loc text="Power/SelectLidCloseActionOnBattery":::
Power :::no-loc text="Select Lid Close Action Plugged In"::: Sleep :::no-loc text="Power/SelectLidCloseActionPluggedIn":::
Power :::no-loc text="Select Power Button Action On Battery"::: Sleep :::no-loc text="Power/SelectPowerButtonActionOnBattery":::
Power :::no-loc text="Select Power Button Action Plugged In"::: Sleep :::no-loc text="Power/SelectPowerButtonActionPluggedIn":::
Power :::no-loc text="Select Sleep Button Action On Battery"::: Sleep :::no-loc text="Power/SelectSleepButtonActionOnBattery":::
Power :::no-loc text="Select Sleep Button Action Plugged In"::: Sleep :::no-loc text="Power/SelectSleepButtonActionPluggedIn":::
Power :::no-loc text="Turn Off Hybrid Sleep On Battery"::: hybrid sleep A hiberfile isn't generated when the system transitions to sleep (Stand By). :::no-loc text="Power/TurnOffHybridSleepOnBattery":::
Power :::no-loc text="Turn Off Hybrid Sleep Plugged In"::: hybrid sleep A hiberfile isn't generated when the system transitions to sleep (Stand By). :::no-loc text="Power/TurnOffHybridSleepPluggedIn":::
Power :::no-loc text="Unattended Sleep Timeout On Battery"::: 3600 How much idle time (seconds) should elapse before Windows automatically transitions to sleep when left unattended. :::no-loc text="Power/UnattendedSleepTimeoutOnBattery":::
Power :::no-loc text="Unattended Sleep Timeout Plugged In"::: 3600 How much idle time (seconds) should elapse before Windows automatically transitions to sleep when left unattended. :::no-loc text="Power/UnattendedSleepTimeoutPluggedIn":::
Security :::no-loc text="Allow Add Provisioning Package"::: Allow Allow the runtime configuration agent to install provisioning packages. :::no-loc text="Security/AllowAddProvisioningPackage":::
Security :::no-loc text="Allow Remove Provisioning Package"::: Allow Allow the runtime configuration agent to remove provisioning packages. :::no-loc text="Security/AllowRemoveProvisioningPackage":::
Settings :::no-loc text="Allow Date Time"::: Block Block the user from changing date and time settings. :::no-loc text="Settings/AllowDateTime":::
Settings :::no-loc text="Allow Language"::: Block Block the user from changing the language settings. :::no-loc text="Settings/AllowLanguage":::
Settings :::no-loc text="Allow Power Sleep"::: Block Block the user from changing power and sleep settings. :::no-loc text="Settings/AllowPowerSleep":::
Settings :::no-loc text="Allow Region"::: Block Block the user from changing the region settings. :::no-loc text="Settings/AllowRegion":::
Shared PC :::no-loc text="Enable Shared PC Mode"::: False :::no-loc text="SharedPC/EnableSharedPCMode":::
Shared PC :::no-loc text="Restrict Local Storage"::: False :::no-loc text="SharedPC/RestrictLocalStorage":::
Shared PC :::no-loc text="Set Edu Policies"::: true :::no-loc text="Windows configuration recommendations for education customers"::: :::no-loc text="SharedPC/SetEDUpolicies":::
Task Manager :::no-loc text="Allow End Task"::: Block :::no-loc text="TaskManager/AllowEndTask":::
Widgets :::no-loc text="Allow Widgets"::: Not allowed. This policy applies to the entire widgets experience, including content on the taskbar. :::no-loc text="AllowNewsAndInterests":::
Wi-Fi Settings :::no-loc text="Allow Auto Connect To Wi Fi Sense Hotspots"::: Block :::no-loc text="Wifi/AllowAutoConnectToWiFiSenseHotspots":::
Wi-Fi Settings :::no-loc text="Allow Internet Sharing"::: Block :::no-loc text="Wifi/AllowInternetSharing":::
Windows Logon :::no-loc text="Hide Fast User Switching"::: Enabled :::no-loc text="WindowsLogon/HideFastUserSwitching":::

[!INCLUDE graph-explorer-introduction]

This creates a policy in your tenant with the name :::no-loc text="_MSLearn_Example_CommonEDU - Windows - Device restrictions":::.

POST https://graph.microsoft.com/beta/deviceManagement/configurationPolicies
Content-Type: application/json

{"name":"_MSLearn_Example_CommonEDU - Windows - Device restrictions","description":"https://aka.ms/ManageEduDevices","platforms":"windows10","technologies":"mdm","roleScopeTagIds":["0"],"settings":[{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_abovelock_allowcortanaabovelock","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_abovelock_allowcortanaabovelock_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_abovelock_allowtoasts","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_abovelock_allowtoasts_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_accounts_allowaddingnonmicrosoftaccountsmanually","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_accounts_allowaddingnonmicrosoftaccountsmanually_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountconnection","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_accounts_allowmicrosoftaccountconnection_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_standbytimeoutonbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_1","children":[{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_enterdcstandbytimeout","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":3600}}]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_1","children":[{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_enteracstandbytimeout","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":3600}}]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_1","children":[{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_entervideodcpowerdowntimeout","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":300}}]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_1","children":[{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_entervideoacpowerdowntimeout","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":300}}]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_2","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_2_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_2","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_2_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_bluetooth_allowadvertising","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_bluetooth_allowadvertising_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_bluetooth_allowdiscoverablemode","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_bluetooth_allowdiscoverablemode_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_bluetooth_allowpromptedproximalconnections","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_bluetooth_allowpromptedproximalconnections_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_camera_allowcamera","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_camera_allowcamera_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_connectivity_allowbluetooth","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_connectivity_allowbluetooth_2","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_experience_allowcortana","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_experience_allowcortana_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"user_vendor_msft_policy_config_experience_allowwindowsspotlight","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"user_vendor_msft_policy_config_experience_allowwindowsspotlight_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_experience_configurechaticon","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_experience_configurechaticon_3","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_applicationmanagement_allowalltrustedapps_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_applicationmanagement_allowdeveloperunlock_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_applicationmanagement_allowshareduserappdata","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_applicationmanagement_allowshareduserappdata_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_allowhibernate","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_allowhibernate_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_energysaverbatterythresholdonbattery","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":50}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_energysaverbatterythresholdpluggedin","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":40}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_unattendedsleeptimeoutonbattery","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":3600}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_power_unattendedsleeptimeoutpluggedin","simpleSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":3600}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage_1","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_settings_allowdatetime","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_settings_allowdatetime_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_settings_allowlanguage","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_settings_allowlanguage_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_settings_allowpowersleep","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_settings_allowpowersleep_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_settings_allowregion","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_settings_allowregion_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"vendor_msft_sharedpc_enablesharedpcmode","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"vendor_msft_sharedpc_enablesharedpcmode_false","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"vendor_msft_sharedpc_restrictlocalstorage","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"vendor_msft_sharedpc_restrictlocalstorage_false","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"vendor_msft_sharedpc_setedupolicies","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"vendor_msft_sharedpc_setedupolicies_true","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_taskmanager_allowendtask","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_taskmanager_allowendtask_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_wifi_allowinternetsharing","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_wifi_allowinternetsharing_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests_0","children":[]}}},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching","choiceSettingValue":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching_1","children":[]}}}]}

[!INCLUDE graph-explorer-steps]