windows10GeneralConfiguration resource type
Namespace: microsoft.graph
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
This topic provides descriptions of the declared methods, properties and relationships exposed by the windows10GeneralConfiguration resource.
Inherits from deviceConfiguration
Methods
| Method | Return Type | Description |
|---|---|---|
| List windows10GeneralConfigurations | windows10GeneralConfiguration collection | List properties and relationships of the windows10GeneralConfiguration objects. |
| Get windows10GeneralConfiguration | windows10GeneralConfiguration | Read properties and relationships of the windows10GeneralConfiguration object. |
| Create windows10GeneralConfiguration | windows10GeneralConfiguration | Create a new windows10GeneralConfiguration object. |
| Delete windows10GeneralConfiguration | None | Deletes a windows10GeneralConfiguration. |
| Update windows10GeneralConfiguration | windows10GeneralConfiguration | Update the properties of a windows10GeneralConfiguration object. |
Properties
| Property | Type | Description |
|---|---|---|
| id | String | Key of the entity. Inherited from deviceConfiguration |
| lastModifiedDateTime | DateTimeOffset | DateTime the object was last modified. Inherited from deviceConfiguration |
| createdDateTime | DateTimeOffset | DateTime the object was created. Inherited from deviceConfiguration |
| description | String | Admin provided description of the Device Configuration. Inherited from deviceConfiguration |
| displayName | String | Admin provided name of the device configuration. Inherited from deviceConfiguration |
| version | Int32 | Version of the device configuration. Inherited from deviceConfiguration |
| enterpriseCloudPrintDiscoveryEndPoint | String | Endpoint for discovering cloud printers. |
| enterpriseCloudPrintOAuthAuthority | String | Authentication endpoint for acquiring OAuth tokens. |
| enterpriseCloudPrintOAuthClientIdentifier | String | GUID of a client application authorized to retrieve OAuth tokens from the OAuth Authority. |
| enterpriseCloudPrintResourceIdentifier | String | OAuth resource URI for print service as configured in the Azure portal. |
| enterpriseCloudPrintDiscoveryMaxLimit | Int32 | Maximum number of printers that should be queried from a discovery endpoint. This is a mobile only setting. Valid values 1 to 65535 |
| enterpriseCloudPrintMopriaDiscoveryResourceIdentifier | String | OAuth resource URI for printer discovery service as configured in Azure portal. |
| searchBlockDiacritics | Boolean | Specifies if search can use diacritics. |
| searchDisableAutoLanguageDetection | Boolean | Specifies whether to use automatic language detection when indexing content and properties. |
| searchDisableIndexingEncryptedItems | Boolean | Indicates whether or not to block indexing of WIP-protected items to prevent them from appearing in search results for Cortana or Explorer. |
| searchEnableRemoteQueries | Boolean | Indicates whether or not to block remote queries of this computer’s index. |
| searchDisableIndexerBackoff | Boolean | Indicates whether or not to disable the search indexer backoff feature. |
| searchDisableIndexingRemovableDrive | Boolean | Indicates whether or not to allow users to add locations on removable drives to libraries and to be indexed. |
| searchEnableAutomaticIndexSizeManangement | Boolean | Specifies minimum amount of hard drive space on the same drive as the index location before indexing stops. |
| diagnosticsDataSubmissionMode | diagnosticDataSubmissionMode | Gets or sets a value allowing the device to send diagnostic and usage telemetry data, such as Watson. Possible values are: userDefined, none, basic, enhanced, full. |
| oneDriveDisableFileSync | Boolean | Gets or sets a value allowing IT admins to prevent apps and features from working with files on OneDrive. |
| smartScreenEnableAppInstallControl | Boolean | This property will be deprecated in July 2019 and will be replaced by property SmartScreenAppInstallControl. Allows IT Admins to control whether users are allowed to install apps from places other than the Store. |
| personalizationDesktopImageUrl | String | A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to used as the Desktop Image. |
| personalizationLockScreenImageUrl | String | A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image. |
| bluetoothAllowedServices | String collection | Specify a list of allowed Bluetooth services and profiles in hex formatted strings. |
| bluetoothBlockAdvertising | Boolean | Whether or not to Block the user from using bluetooth advertising. |
| bluetoothBlockDiscoverableMode | Boolean | Whether or not to Block the user from using bluetooth discoverable mode. |
| bluetoothBlockPrePairing | Boolean | Whether or not to block specific bundled Bluetooth peripherals to automatically pair with the host device. |
| edgeBlockAutofill | Boolean | Indicates whether or not to block auto fill. |
| edgeBlocked | Boolean | Indicates whether or not to Block the user from using the Edge browser. |
| edgeCookiePolicy | edgeCookiePolicy | Indicates which cookies to block in the Edge browser. Possible values are: userDefined, allow, blockThirdParty, blockAll. |
| edgeBlockDeveloperTools | Boolean | Indicates whether or not to block developer tools in the Edge browser. |
| edgeBlockSendingDoNotTrackHeader | Boolean | Indicates whether or not to Block the user from sending the do not track header. |
| edgeBlockExtensions | Boolean | Indicates whether or not to block extensions in the Edge browser. |
| edgeBlockInPrivateBrowsing | Boolean | Indicates whether or not to block InPrivate browsing on corporate networks, in the Edge browser. |
| edgeBlockJavaScript | Boolean | Indicates whether or not to Block the user from using JavaScript. |
| edgeBlockPasswordManager | Boolean | Indicates whether or not to Block password manager. |
| edgeBlockAddressBarDropdown | Boolean | Block the address bar dropdown functionality in Microsoft Edge. Disable this settings to minimize network connections from Microsoft Edge to Microsoft services. |
| edgeBlockCompatibilityList | Boolean | Block Microsoft compatibility list in Microsoft Edge. This list from Microsoft helps Edge properly display sites with known compatibility issues. |
| edgeClearBrowsingDataOnExit | Boolean | Clear browsing data on exiting Microsoft Edge. |
| edgeAllowStartPagesModification | Boolean | Allow users to change Start pages on Edge. Use the EdgeHomepageUrls to specify the Start pages that the user would see by default when they open Edge. |
| edgeDisableFirstRunPage | Boolean | Block the Microsoft web page that opens on the first use of Microsoft Edge. This policy allows enterprises, like those enrolled in zero emissions configurations, to block this page. |
| edgeBlockLiveTileDataCollection | Boolean | Block the collection of information by Microsoft for live tile creation when users pin a site to Start from Microsoft Edge. |
| edgeSyncFavoritesWithInternetExplorer | Boolean | Enable favorites sync between Internet Explorer and Microsoft Edge. Additions, deletions, modifications and order changes to favorites are shared between browsers. |
| cellularBlockDataWhenRoaming | Boolean | Whether or not to Block the user from using data over cellular while roaming. |
| cellularBlockVpn | Boolean | Whether or not to Block the user from using VPN over cellular. |
| cellularBlockVpnWhenRoaming | Boolean | Whether or not to Block the user from using VPN when roaming over cellular. |
| defenderRequireRealTimeMonitoring | Boolean | Indicates whether or not to require real time monitoring. |
| defenderRequireBehaviorMonitoring | Boolean | Indicates whether or not to require behavior monitoring. |
| defenderRequireNetworkInspectionSystem | Boolean | Indicates whether or not to require network inspection system. |
| defenderScanDownloads | Boolean | Indicates whether or not to scan downloads. |
| defenderScanScriptsLoadedInInternetExplorer | Boolean | Indicates whether or not to scan scripts loaded in Internet Explorer browser. |
| defenderBlockEndUserAccess | Boolean | Whether or not to block end user access to Defender. |
| defenderSignatureUpdateIntervalInHours | Int32 | The signature update interval in hours. Specify 0 not to check. Valid values 0 to 24 |
| defenderMonitorFileActivity | defenderMonitorFileActivity | Value for monitoring file activity. Possible values are: userDefined, disable, monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly. |
| defenderDaysBeforeDeletingQuarantinedMalware | Int32 | Number of days before deleting quarantined malware. Valid values 0 to 90 |
| defenderScanMaxCpu | Int32 | Max CPU usage percentage during scan. Valid values 0 to 100 |
| defenderScanArchiveFiles | Boolean | Indicates whether or not to scan archive files. |
| defenderScanIncomingMail | Boolean | Indicates whether or not to scan incoming mail messages. |
| defenderScanRemovableDrivesDuringFullScan | Boolean | Indicates whether or not to scan removable drives during full scan. |
| defenderScanMappedNetworkDrivesDuringFullScan | Boolean | Indicates whether or not to scan mapped network drives during full scan. |
| defenderScanNetworkFiles | Boolean | Indicates whether or not to scan files opened from a network folder. |
| defenderRequireCloudProtection | Boolean | Indicates whether or not to require cloud protection. |
| defenderCloudBlockLevel | defenderCloudBlockLevelType | Specifies the level of cloud-delivered protection. Possible values are: notConfigured, high, highPlus, zeroTolerance. |
| defenderPromptForSampleSubmission | defenderPromptForSampleSubmission | The configuration for how to prompt user for sample submission. Possible values are: userDefined, alwaysPrompt, promptBeforeSendingPersonalData, neverSendData, sendAllDataWithoutPrompting. |
| defenderScheduledQuickScanTime | TimeOfDay | The time to perform a daily quick scan. |
| defenderScanType | defenderScanType | The defender system scan type. Possible values are: userDefined, disabled, quick, full. |
| defenderSystemScanSchedule | weeklySchedule | Defender day of the week for the system scan. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday. |
| defenderScheduledScanTime | TimeOfDay | The defender time for the system scan. |
| defenderDetectedMalwareActions | defenderDetectedMalwareActions | Gets or sets Defender’s actions to take on detected Malware per threat level. |
| defenderFileExtensionsToExclude | String collection | File extensions to exclude from scans and real time protection. |
| defenderFilesAndFoldersToExclude | String collection | Files and folder to exclude from scans and real time protection. |
| defenderProcessesToExclude | String collection | Processes to exclude from scans and real time protection. |
| lockScreenAllowTimeoutConfiguration | Boolean | Specify whether to show a user-configurable setting to control the screen timeout while on the lock screen of Windows 10 Mobile devices. If this policy is set to Allow, the value set by lockScreenTimeoutInSeconds is ignored. |
| lockScreenBlockActionCenterNotifications | Boolean | Indicates whether or not to block action center notifications over lock screen. |
| lockScreenBlockCortana | Boolean | Indicates whether or not the user can interact with Cortana using speech while the system is locked. |
| lockScreenBlockToastNotifications | Boolean | Indicates whether to allow toast notifications above the device lock screen. |
| lockScreenTimeoutInSeconds | Int32 | Set the duration (in seconds) from the screen locking to the screen turning off for Windows 10 Mobile devices. Supported values are 11-1800. Valid values 11 to 1800 |
| passwordBlockSimple | Boolean | Specify whether PINs or passwords such as "1111" or "1234" are allowed. For Windows 10 desktops, it also controls the use of picture passwords. |
| passwordExpirationDays | Int32 | The password expiration in days. Valid values 0 to 730 |
| passwordMinimumLength | Int32 | The minimum password length. Valid values 4 to 16 |
| passwordMinutesOfInactivityBeforeScreenTimeout | Int32 | The minutes of inactivity before the screen times out. |
| passwordMinimumCharacterSetCount | Int32 | The number of character sets required in the password. |
| passwordPreviousPasswordBlockCount | Int32 | The number of previous passwords to prevent reuse of. Valid values 0 to 50 |
| passwordRequired | Boolean | Indicates whether or not to require the user to have a password. |
| passwordRequireWhenResumeFromIdleState | Boolean | Indicates whether or not to require a password upon resuming from an idle state. |
| passwordRequiredType | requiredPasswordType | The required password type. Possible values are: deviceDefault, alphanumeric, numeric. |
| passwordSignInFailureCountBeforeFactoryReset | Int32 | The number of sign in failures before factory reset. Valid values 0 to 999 |
| privacyAdvertisingId | stateManagementSetting | Enables or disables the use of advertising ID. Added in Windows 10, version 1607. Possible values are: notConfigured, blocked, allowed. |
| privacyAutoAcceptPairingAndConsentPrompts | Boolean | Indicates whether or not to allow the automatic acceptance of the pairing and privacy user consent dialog when launching apps. |
| privacyBlockInputPersonalization | Boolean | Indicates whether or not to block the usage of cloud based speech services for Cortana, Dictation, or Store applications. |
| startBlockUnpinningAppsFromTaskbar | Boolean | Indicates whether or not to block the user from unpinning apps from taskbar. |
| startMenuAppListVisibility | windowsStartMenuAppListVisibilityType | Setting the value of this collapses the app list, removes the app list entirely, or disables the corresponding toggle in the Settings app. Possible values are: userDefined, collapse, remove, disableSettingsApp. |
| startMenuHideChangeAccountSettings | Boolean | Enabling this policy hides the change account setting from appearing in the user tile in the start menu. |
| startMenuHideFrequentlyUsedApps | Boolean | Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app. |
| startMenuHideHibernate | Boolean | Enabling this policy hides hibernate from appearing in the power button in the start menu. |
| startMenuHideLock | Boolean | Enabling this policy hides lock from appearing in the user tile in the start menu. |
| startMenuHidePowerButton | Boolean | Enabling this policy hides the power button from appearing in the start menu. |
| startMenuHideRecentJumpLists | Boolean | Enabling this policy hides recent jump lists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app. |
| startMenuHideRecentlyAddedApps | Boolean | Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app. |
| startMenuHideRestartOptions | Boolean | Enabling this policy hides “Restart/Update and Restart” from appearing in the power button in the start menu. |
| startMenuHideShutDown | Boolean | Enabling this policy hides shut down/update and shut down from appearing in the power button in the start menu. |
| startMenuHideSignOut | Boolean | Enabling this policy hides sign out from appearing in the user tile in the start menu. |
| startMenuHideSleep | Boolean | Enabling this policy hides sleep from appearing in the power button in the start menu. |
| startMenuHideSwitchAccount | Boolean | Enabling this policy hides switch account from appearing in the user tile in the start menu. |
| startMenuHideUserTile | Boolean | Enabling this policy hides the user tile from appearing in the start menu. |
| startMenuLayoutEdgeAssetsXml | Binary | This policy setting allows you to import Edge assets to be used with startMenuLayoutXml policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when startMenuLayoutXml policy is modified. The value should be a UTF-8 Base64 encoded byte array. |
| startMenuLayoutXml | Binary | Allows admins to override the default Start menu layout and prevents the user from changing it. The layout is modified by specifying an XML file based on a layout modification schema. XML needs to be in a UTF8 encoded byte array format. |
| startMenuMode | windowsStartMenuModeType | Allows admins to decide how the Start menu is displayed. Possible values are: userDefined, fullScreen, nonFullScreen. |
| startMenuPinnedFolderDocuments | visibilitySetting | Enforces the visibility (Show/Hide) of the Documents folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderDownloads | visibilitySetting | Enforces the visibility (Show/Hide) of the Downloads folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderFileExplorer | visibilitySetting | Enforces the visibility (Show/Hide) of the FileExplorer shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderHomeGroup | visibilitySetting | Enforces the visibility (Show/Hide) of the HomeGroup folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderMusic | visibilitySetting | Enforces the visibility (Show/Hide) of the Music folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderNetwork | visibilitySetting | Enforces the visibility (Show/Hide) of the Network folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderPersonalFolder | visibilitySetting | Enforces the visibility (Show/Hide) of the PersonalFolder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderPictures | visibilitySetting | Enforces the visibility (Show/Hide) of the Pictures folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderSettings | visibilitySetting | Enforces the visibility (Show/Hide) of the Settings folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| startMenuPinnedFolderVideos | visibilitySetting | Enforces the visibility (Show/Hide) of the Videos folder shortcut on the Start menu. Possible values are: notConfigured, hide, show. |
| settingsBlockSettingsApp | Boolean | Indicates whether or not to block access to Settings app. |
| settingsBlockSystemPage | Boolean | Indicates whether or not to block access to System in Settings app. |
| settingsBlockDevicesPage | Boolean | Indicates whether or not to block access to Devices in Settings app. |
| settingsBlockNetworkInternetPage | Boolean | Indicates whether or not to block access to Network & Internet in Settings app. |
| settingsBlockPersonalizationPage | Boolean | Indicates whether or not to block access to Personalization in Settings app. |
| settingsBlockAccountsPage | Boolean | Indicates whether or not to block access to Accounts in Settings app. |
| settingsBlockTimeLanguagePage | Boolean | Indicates whether or not to block access to Time & Language in Settings app. |
| settingsBlockEaseOfAccessPage | Boolean | Indicates whether or not to block access to Ease of Access in Settings app. |
| settingsBlockPrivacyPage | Boolean | Indicates whether or not to block access to Privacy in Settings app. |
| settingsBlockUpdateSecurityPage | Boolean | Indicates whether or not to block access to Update & Security in Settings app. |
| settingsBlockAppsPage | Boolean | Indicates whether or not to block access to Apps in Settings app. |
| settingsBlockGamingPage | Boolean | Indicates whether or not to block access to Gaming in Settings app. |
| windowsSpotlightBlockConsumerSpecificFeatures | Boolean | Allows IT admins to block experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles. |
| windowsSpotlightBlocked | Boolean | Allows IT admins to turn off all Windows Spotlight features |
| windowsSpotlightBlockOnActionCenter | Boolean | Block suggestions from Microsoft that show after each OS clean install, upgrade or in an on-going basis to introduce users to what is new or changed |
| windowsSpotlightBlockTailoredExperiences | Boolean | Block personalized content in Windows spotlight based on user’s device usage. |
| windowsSpotlightBlockThirdPartyNotifications | Boolean | Block third party content delivered via Windows Spotlight |
| windowsSpotlightBlockWelcomeExperience | Boolean | Block Windows Spotlight Windows welcome experience |
| windowsSpotlightBlockWindowsTips | Boolean | Allows IT admins to turn off the popup of Windows Tips. |
| windowsSpotlightConfigureOnLockScreen | windowsSpotlightEnablementSettings | Specifies the type of Spotlight. Possible values are: notConfigured, disabled, enabled. |
| networkProxyApplySettingsDeviceWide | Boolean | If set, proxy settings will be applied to all processes and accounts in the device. Otherwise, it will be applied to the user account that’s enrolled into MDM. |
| networkProxyDisableAutoDetect | Boolean | Disable automatic detection of settings. If enabled, the system will try to find the path to a proxy auto-config (PAC) script. |
| networkProxyAutomaticConfigurationUrl | String | Address to the proxy auto-config (PAC) script you want to use. |
| networkProxyServer | windows10NetworkProxyServer | Specifies manual proxy server settings. |
| accountsBlockAddingNonMicrosoftAccountEmail | Boolean | Indicates whether or not to Block the user from adding email accounts to the device that are not associated with a Microsoft account. |
| antiTheftModeBlocked | Boolean | Indicates whether or not to block the user from selecting an AntiTheft mode preference (Windows 10 Mobile only). |
| bluetoothBlocked | Boolean | Whether or not to Block the user from using bluetooth. |
| cameraBlocked | Boolean | Whether or not to Block the user from accessing the camera of the device. |
| connectedDevicesServiceBlocked | Boolean | Whether or not to block Connected Devices Service which enables discovery and connection to other devices, remote messaging, remote app sessions and other cross-device experiences. |
| certificatesBlockManualRootCertificateInstallation | Boolean | Whether or not to Block the user from doing manual root certificate installation. |
| copyPasteBlocked | Boolean | Whether or not to Block the user from using copy paste. |
| cortanaBlocked | Boolean | Whether or not to Block the user from using Cortana. |
| deviceManagementBlockFactoryResetOnMobile | Boolean | Indicates whether or not to Block the user from resetting their phone. |
| deviceManagementBlockManualUnenroll | Boolean | Indicates whether or not to Block the user from doing manual un-enrollment from device management. |
| safeSearchFilter | safeSearchFilterType | Specifies what filter level of safe search is required. Possible values are: userDefined, strict, moderate. |
| edgeBlockPopups | Boolean | Indicates whether or not to block popups. |
| edgeBlockSearchSuggestions | Boolean | Indicates whether or not to block the user from using the search suggestions in the address bar. |
| edgeBlockSendingIntranetTrafficToInternetExplorer | Boolean | Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer. Note: the name of this property is misleading; the property is obsolete, use EdgeSendIntranetTrafficToInternetExplorer instead. |
| edgeSendIntranetTrafficToInternetExplorer | Boolean | Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer. |
| edgeRequireSmartScreen | Boolean | Indicates whether or not to Require the user to use the smart screen filter. |
| edgeEnterpriseModeSiteListLocation | String | Indicates the enterprise mode site list location. Could be a local file, local network or http location. |
| edgeFirstRunUrl | String | The first run URL for when Edge browser is opened for the first time. |
| edgeSearchEngine | edgeSearchEngineBase | Allows IT admins to set a default search engine for MDM-Controlled devices. Users can override this and change their default search engine provided the AllowSearchEngineCustomization policy is not set. |
| edgeHomepageUrls | String collection | The list of URLs for homepages shodwn on MDM-enrolled devices on Edge browser. |
| edgeBlockAccessToAboutFlags | Boolean | Indicates whether or not to prevent access to about flags on Edge browser. |
| smartScreenBlockPromptOverride | Boolean | Indicates whether or not users can override SmartScreen Filter warnings about potentially malicious websites. |
| smartScreenBlockPromptOverrideForFiles | Boolean | Indicates whether or not users can override the SmartScreen Filter warnings about downloading unverified files |
| webRtcBlockLocalhostIpAddress | Boolean | Indicates whether or not user's localhost IP address is displayed while making phone calls using the WebRTC |
| internetSharingBlocked | Boolean | Indicates whether or not to Block the user from using internet sharing. |
| settingsBlockAddProvisioningPackage | Boolean | Indicates whether or not to block the user from installing provisioning packages. |
| settingsBlockRemoveProvisioningPackage | Boolean | Indicates whether or not to block the runtime configuration agent from removing provisioning packages. |
| settingsBlockChangeSystemTime | Boolean | Indicates whether or not to block the user from changing date and time settings. |
| settingsBlockEditDeviceName | Boolean | Indicates whether or not to block the user from editing the device name. |
| settingsBlockChangeRegion | Boolean | Indicates whether or not to block the user from changing the region settings. |
| settingsBlockChangeLanguage | Boolean | Indicates whether or not to block the user from changing the language settings. |
| settingsBlockChangePowerSleep | Boolean | Indicates whether or not to block the user from changing power and sleep settings. |
| locationServicesBlocked | Boolean | Indicates whether or not to Block the user from location services. |
| microsoftAccountBlocked | Boolean | Indicates whether or not to Block a Microsoft account. |
| microsoftAccountBlockSettingsSync | Boolean | Indicates whether or not to Block Microsoft account settings sync. |
| nfcBlocked | Boolean | Indicates whether or not to Block the user from using near field communication. |
| resetProtectionModeBlocked | Boolean | Indicates whether or not to Block the user from reset protection mode. |
| screenCaptureBlocked | Boolean | Indicates whether or not to Block the user from taking Screenshots. |
| storageBlockRemovableStorage | Boolean | Indicates whether or not to Block the user from using removable storage. |
| storageRequireMobileDeviceEncryption | Boolean | Indicating whether or not to require encryption on a mobile device. |
| usbBlocked | Boolean | Indicates whether or not to Block the user from USB connection. |
| voiceRecordingBlocked | Boolean | Indicates whether or not to Block the user from voice recording. |
| wiFiBlockAutomaticConnectHotspots | Boolean | Indicating whether or not to block automatically connecting to Wi-Fi hotspots. Has no impact if Wi-Fi is blocked. |
| wiFiBlocked | Boolean | Indicates whether or not to Block the user from using Wi-Fi. |
| wiFiBlockManualConfiguration | Boolean | Indicates whether or not to Block the user from using Wi-Fi manual configuration. |
| wiFiScanInterval | Int32 | Specify how often devices scan for Wi-Fi networks. Supported values are 1-500, where 100 = default, and 500 = low frequency. Valid values 1 to 500 |
| wirelessDisplayBlockProjectionToThisDevice | Boolean | Indicates whether or not to allow other devices from discovering this PC for projection. |
| wirelessDisplayBlockUserInputFromReceiver | Boolean | Indicates whether or not to allow user input from wireless display receiver. |
| wirelessDisplayRequirePinForPairing | Boolean | Indicates whether or not to require a PIN for new devices to initiate pairing. |
| windowsStoreBlocked | Boolean | Indicates whether or not to Block the user from using the Windows store. |
| appsAllowTrustedAppsSideloading | stateManagementSetting | Indicates whether apps from AppX packages signed with a trusted certificate can be side loaded. Possible values are: notConfigured, blocked, allowed. |
| windowsStoreBlockAutoUpdate | Boolean | Indicates whether or not to block automatic update of apps from Windows Store. |
| developerUnlockSetting | stateManagementSetting | Indicates whether or not to allow developer unlock. Possible values are: notConfigured, blocked, allowed. |
| sharedUserAppDataAllowed | Boolean | Indicates whether or not to block multiple users of the same app to share data. |
| appsBlockWindowsStoreOriginatedApps | Boolean | Indicates whether or not to disable the launch of all apps from Windows Store that came pre-installed or were downloaded. |
| windowsStoreEnablePrivateStoreOnly | Boolean | Indicates whether or not to enable Private Store Only. |
| storageRestrictAppDataToSystemVolume | Boolean | Indicates whether application data is restricted to the system drive. |
| storageRestrictAppInstallToSystemVolume | Boolean | Indicates whether the installation of applications is restricted to the system drive. |
| gameDvrBlocked | Boolean | Indicates whether or not to block DVR and broadcasting. |
| experienceBlockDeviceDiscovery | Boolean | Indicates whether or not to enable device discovery UX. |
| experienceBlockErrorDialogWhenNoSIM | Boolean | Indicates whether or not to allow the error dialog from displaying if no SIM card is detected. |
| experienceBlockTaskSwitcher | Boolean | Indicates whether or not to enable task switching on the device. |
| logonBlockFastUserSwitching | Boolean | Disables the ability to quickly switch between users that are logged on simultaneously without logging off. |
| tenantLockdownRequireNetworkDuringOutOfBoxExperience | Boolean | Whether the device is required to connect to the network. |
Relationships
| Relationship | Type | Description |
|---|---|---|
| assignments | deviceConfigurationAssignment collection | The list of assignments for the device configuration profile. Inherited from deviceConfiguration |
| deviceStatuses | deviceConfigurationDeviceStatus collection | Device configuration installation status by device. Inherited from deviceConfiguration |
| userStatuses | deviceConfigurationUserStatus collection | Device configuration installation status by user. Inherited from deviceConfiguration |
| deviceStatusOverview | deviceConfigurationDeviceOverview | Device Configuration devices status overview Inherited from deviceConfiguration |
| userStatusOverview | deviceConfigurationUserOverview | Device Configuration users status overview Inherited from deviceConfiguration |
| deviceSettingStateSummaries | settingStateDeviceSummary collection | Device Configuration Setting State Device Summary Inherited from deviceConfiguration |
JSON Representation
Here is a JSON representation of the resource.
{
"@odata.type": "#microsoft.graph.windows10GeneralConfiguration",
"id": "String (identifier)",
"lastModifiedDateTime": "String (timestamp)",
"createdDateTime": "String (timestamp)",
"description": "String",
"displayName": "String",
"version": 1024,
"enterpriseCloudPrintDiscoveryEndPoint": "String",
"enterpriseCloudPrintOAuthAuthority": "String",
"enterpriseCloudPrintOAuthClientIdentifier": "String",
"enterpriseCloudPrintResourceIdentifier": "String",
"enterpriseCloudPrintDiscoveryMaxLimit": 1024,
"enterpriseCloudPrintMopriaDiscoveryResourceIdentifier": "String",
"searchBlockDiacritics": true,
"searchDisableAutoLanguageDetection": true,
"searchDisableIndexingEncryptedItems": true,
"searchEnableRemoteQueries": true,
"searchDisableIndexerBackoff": true,
"searchDisableIndexingRemovableDrive": true,
"searchEnableAutomaticIndexSizeManangement": true,
"diagnosticsDataSubmissionMode": "String",
"oneDriveDisableFileSync": true,
"smartScreenEnableAppInstallControl": true,
"personalizationDesktopImageUrl": "String",
"personalizationLockScreenImageUrl": "String",
"bluetoothAllowedServices": [
"String"
],
"bluetoothBlockAdvertising": true,
"bluetoothBlockDiscoverableMode": true,
"bluetoothBlockPrePairing": true,
"edgeBlockAutofill": true,
"edgeBlocked": true,
"edgeCookiePolicy": "String",
"edgeBlockDeveloperTools": true,
"edgeBlockSendingDoNotTrackHeader": true,
"edgeBlockExtensions": true,
"edgeBlockInPrivateBrowsing": true,
"edgeBlockJavaScript": true,
"edgeBlockPasswordManager": true,
"edgeBlockAddressBarDropdown": true,
"edgeBlockCompatibilityList": true,
"edgeClearBrowsingDataOnExit": true,
"edgeAllowStartPagesModification": true,
"edgeDisableFirstRunPage": true,
"edgeBlockLiveTileDataCollection": true,
"edgeSyncFavoritesWithInternetExplorer": true,
"cellularBlockDataWhenRoaming": true,
"cellularBlockVpn": true,
"cellularBlockVpnWhenRoaming": true,
"defenderRequireRealTimeMonitoring": true,
"defenderRequireBehaviorMonitoring": true,
"defenderRequireNetworkInspectionSystem": true,
"defenderScanDownloads": true,
"defenderScanScriptsLoadedInInternetExplorer": true,
"defenderBlockEndUserAccess": true,
"defenderSignatureUpdateIntervalInHours": 1024,
"defenderMonitorFileActivity": "String",
"defenderDaysBeforeDeletingQuarantinedMalware": 1024,
"defenderScanMaxCpu": 1024,
"defenderScanArchiveFiles": true,
"defenderScanIncomingMail": true,
"defenderScanRemovableDrivesDuringFullScan": true,
"defenderScanMappedNetworkDrivesDuringFullScan": true,
"defenderScanNetworkFiles": true,
"defenderRequireCloudProtection": true,
"defenderCloudBlockLevel": "String",
"defenderPromptForSampleSubmission": "String",
"defenderScheduledQuickScanTime": "String (time of day)",
"defenderScanType": "String",
"defenderSystemScanSchedule": "String",
"defenderScheduledScanTime": "String (time of day)",
"defenderDetectedMalwareActions": {
"@odata.type": "microsoft.graph.defenderDetectedMalwareActions",
"lowSeverity": "String",
"moderateSeverity": "String",
"highSeverity": "String",
"severeSeverity": "String"
},
"defenderFileExtensionsToExclude": [
"String"
],
"defenderFilesAndFoldersToExclude": [
"String"
],
"defenderProcessesToExclude": [
"String"
],
"lockScreenAllowTimeoutConfiguration": true,
"lockScreenBlockActionCenterNotifications": true,
"lockScreenBlockCortana": true,
"lockScreenBlockToastNotifications": true,
"lockScreenTimeoutInSeconds": 1024,
"passwordBlockSimple": true,
"passwordExpirationDays": 1024,
"passwordMinimumLength": 1024,
"passwordMinutesOfInactivityBeforeScreenTimeout": 1024,
"passwordMinimumCharacterSetCount": 1024,
"passwordPreviousPasswordBlockCount": 1024,
"passwordRequired": true,
"passwordRequireWhenResumeFromIdleState": true,
"passwordRequiredType": "String",
"passwordSignInFailureCountBeforeFactoryReset": 1024,
"privacyAdvertisingId": "String",
"privacyAutoAcceptPairingAndConsentPrompts": true,
"privacyBlockInputPersonalization": true,
"startBlockUnpinningAppsFromTaskbar": true,
"startMenuAppListVisibility": "String",
"startMenuHideChangeAccountSettings": true,
"startMenuHideFrequentlyUsedApps": true,
"startMenuHideHibernate": true,
"startMenuHideLock": true,
"startMenuHidePowerButton": true,
"startMenuHideRecentJumpLists": true,
"startMenuHideRecentlyAddedApps": true,
"startMenuHideRestartOptions": true,
"startMenuHideShutDown": true,
"startMenuHideSignOut": true,
"startMenuHideSleep": true,
"startMenuHideSwitchAccount": true,
"startMenuHideUserTile": true,
"startMenuLayoutEdgeAssetsXml": "binary",
"startMenuLayoutXml": "binary",
"startMenuMode": "String",
"startMenuPinnedFolderDocuments": "String",
"startMenuPinnedFolderDownloads": "String",
"startMenuPinnedFolderFileExplorer": "String",
"startMenuPinnedFolderHomeGroup": "String",
"startMenuPinnedFolderMusic": "String",
"startMenuPinnedFolderNetwork": "String",
"startMenuPinnedFolderPersonalFolder": "String",
"startMenuPinnedFolderPictures": "String",
"startMenuPinnedFolderSettings": "String",
"startMenuPinnedFolderVideos": "String",
"settingsBlockSettingsApp": true,
"settingsBlockSystemPage": true,
"settingsBlockDevicesPage": true,
"settingsBlockNetworkInternetPage": true,
"settingsBlockPersonalizationPage": true,
"settingsBlockAccountsPage": true,
"settingsBlockTimeLanguagePage": true,
"settingsBlockEaseOfAccessPage": true,
"settingsBlockPrivacyPage": true,
"settingsBlockUpdateSecurityPage": true,
"settingsBlockAppsPage": true,
"settingsBlockGamingPage": true,
"windowsSpotlightBlockConsumerSpecificFeatures": true,
"windowsSpotlightBlocked": true,
"windowsSpotlightBlockOnActionCenter": true,
"windowsSpotlightBlockTailoredExperiences": true,
"windowsSpotlightBlockThirdPartyNotifications": true,
"windowsSpotlightBlockWelcomeExperience": true,
"windowsSpotlightBlockWindowsTips": true,
"windowsSpotlightConfigureOnLockScreen": "String",
"networkProxyApplySettingsDeviceWide": true,
"networkProxyDisableAutoDetect": true,
"networkProxyAutomaticConfigurationUrl": "String",
"networkProxyServer": {
"@odata.type": "microsoft.graph.windows10NetworkProxyServer",
"address": "String",
"exceptions": [
"String"
],
"useForLocalAddresses": true
},
"accountsBlockAddingNonMicrosoftAccountEmail": true,
"antiTheftModeBlocked": true,
"bluetoothBlocked": true,
"cameraBlocked": true,
"connectedDevicesServiceBlocked": true,
"certificatesBlockManualRootCertificateInstallation": true,
"copyPasteBlocked": true,
"cortanaBlocked": true,
"deviceManagementBlockFactoryResetOnMobile": true,
"deviceManagementBlockManualUnenroll": true,
"safeSearchFilter": "String",
"edgeBlockPopups": true,
"edgeBlockSearchSuggestions": true,
"edgeBlockSendingIntranetTrafficToInternetExplorer": true,
"edgeSendIntranetTrafficToInternetExplorer": true,
"edgeRequireSmartScreen": true,
"edgeEnterpriseModeSiteListLocation": "String",
"edgeFirstRunUrl": "String",
"edgeSearchEngine": {
"@odata.type": "microsoft.graph.edgeSearchEngineBase"
},
"edgeHomepageUrls": [
"String"
],
"edgeBlockAccessToAboutFlags": true,
"smartScreenBlockPromptOverride": true,
"smartScreenBlockPromptOverrideForFiles": true,
"webRtcBlockLocalhostIpAddress": true,
"internetSharingBlocked": true,
"settingsBlockAddProvisioningPackage": true,
"settingsBlockRemoveProvisioningPackage": true,
"settingsBlockChangeSystemTime": true,
"settingsBlockEditDeviceName": true,
"settingsBlockChangeRegion": true,
"settingsBlockChangeLanguage": true,
"settingsBlockChangePowerSleep": true,
"locationServicesBlocked": true,
"microsoftAccountBlocked": true,
"microsoftAccountBlockSettingsSync": true,
"nfcBlocked": true,
"resetProtectionModeBlocked": true,
"screenCaptureBlocked": true,
"storageBlockRemovableStorage": true,
"storageRequireMobileDeviceEncryption": true,
"usbBlocked": true,
"voiceRecordingBlocked": true,
"wiFiBlockAutomaticConnectHotspots": true,
"wiFiBlocked": true,
"wiFiBlockManualConfiguration": true,
"wiFiScanInterval": 1024,
"wirelessDisplayBlockProjectionToThisDevice": true,
"wirelessDisplayBlockUserInputFromReceiver": true,
"wirelessDisplayRequirePinForPairing": true,
"windowsStoreBlocked": true,
"appsAllowTrustedAppsSideloading": "String",
"windowsStoreBlockAutoUpdate": true,
"developerUnlockSetting": "String",
"sharedUserAppDataAllowed": true,
"appsBlockWindowsStoreOriginatedApps": true,
"windowsStoreEnablePrivateStoreOnly": true,
"storageRestrictAppDataToSystemVolume": true,
"storageRestrictAppInstallToSystemVolume": true,
"gameDvrBlocked": true,
"experienceBlockDeviceDiscovery": true,
"experienceBlockErrorDialogWhenNoSIM": true,
"experienceBlockTaskSwitcher": true,
"logonBlockFastUserSwitching": true,
"tenantLockdownRequireNetworkDuringOutOfBoxExperience": true
}