Windows privacy

Microsoft Intune and Intune for Education can configure privacy settings for Windows 10 and later. This article summarizes the configurations that are most commonly used for student and teacher devices.

Important

The settings in this article configure user privacy. These settings should only be deployed after careful consideration.

Note

This is an optional policy

To learn more, see Use the settings catalog to configure settings on Windows, iOS/iPadOS, and macOS devices

Tip

When creating a settings catalog profile in the Microsoft Intune admin center, you can copy a policy name from this article and paste it into the settings picker search field to find the desired policy.

Settings catalog policies

Name	Value	Notes	CSP
Allow Location	Force Location On. All Location Privacy settings are toggled on and grayed out. Users can't change the settings and all consent permissions will be automatically suppressed.	Required to invoke Locate device action on Windows devices in Intune.	System/AllowLocation
Let Apps Access Location	Force allow.	Windows apps are allowed to access location. You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.	Privacy/LetAppsAccessLocation