Policy CSP - ADMX_Programs
Tip
This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see Understanding ADMX-backed policies.
The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.
NoDefaultPrograms
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoDefaultPrograms
This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users can't view or change the associated page.
The Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as specify the programs that are accessible from the Start menu, desktop, and other locations.
If this setting is disabled or not configured, the Set Program Access and Defaults button is available to all users.
This setting doesn't prevent users from using other tools and methods to change program access or defaults.
This setting doesn't prevent the Default Programs icon from appearing on the Start menu.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoDefaultPrograms |
| Friendly Name | Hide "Set Program Access and Computer Defaults" page |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoDefaultPrograms |
| ADMX File Name | Programs.admx |
NoGetPrograms
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoGetPrograms
Prevents users from viewing or installing published programs from the network.
This setting prevents users from accessing the "Get Programs" page from the Programs Control Panel in Category View, Programs and Features in Classic View and the "Install a program from the netowrk" task. The "Get Programs" page lists published programs and provides an easy way to install them.
Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users of their availability, to recommend their use, or to enable users to install them without having to search for installation files.
If this setting is enabled, users can't view the programs that have been published by the system administrator, and they can't use the "Get Programs" page to install published programs. Enabling this feature doesn't prevent users from installing programs by using other methods. Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu.
If this setting is disabled or isn't configured, the "Install a program from the network" task to the "Get Programs" page will be available to all users.
Note
If the "Hide Programs Control Panel" setting is enabled, this setting is ignored.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoGetPrograms |
| Friendly Name | Hide "Get Programs" page |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoGetPrograms |
| ADMX File Name | Programs.admx |
NoInstalledUpdates
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoInstalledUpdates
This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task.
"Installed Updates" allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers.
If this setting is disabled or not configured, the "View installed updates" task and the "Installed Updates" page will be available to all users.
This setting doesn't prevent users from using other tools and methods to install or uninstall programs.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoInstalledUpdates |
| Friendly Name | Hide "Installed Updates" page |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoInstalledUpdates |
| ADMX File Name | Programs.admx |
NoProgramsAndFeatures
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoProgramsAndFeatures
This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are currently installed on the computer.
If this setting is disabled or not configured, "Programs and Features" will be available to all users.
This setting doesn't prevent users from using other tools and methods to view or uninstall programs. It also doesn't prevent users from linking to related Programs Control Panel Features including Windows Features, Get Programs, or Windows Marketplace.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoProgramsAndFeatures |
| Friendly Name | Hide "Programs and Features" page |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoProgramsAndFeatures |
| ADMX File Name | Programs.admx |
NoProgramsCPL
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoProgramsCPL
This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.
The Programs Control Panel allows users to uninstall, change, and repair programs, enable and disable Windows Features, set program defaults, view installed updates, and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel.
If this setting is disabled or not configured, the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users.
When enabled, this setting takes precedence over the other settings in this folder.
This setting doesn't prevent users from using other tools and methods to install or uninstall programs.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoProgramsCPL |
| Friendly Name | Hide the Programs Control Panel |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoProgramsCPL |
| ADMX File Name | Programs.admx |
NoWindowsFeatures
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoWindowsFeatures
This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs. As a result, users can't view, enable, or disable various Windows features and services.
If this setting is disabled or isn't configured, the "Turn Windows features on or off" task will be available to all users.
This setting doesn't prevent users from using other tools and methods to configure services or enable or disable program components.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoWindowsFeatures |
| Friendly Name | Hide "Windows Features" |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoWindowsFeatures |
| ADMX File Name | Programs.admx |
NoWindowsMarketplace
| Scope | Editions | Applicable OS |
|---|---|---|
| ❌ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC |
✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/ADMX_Programs/NoWindowsMarketplace
This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs.
Windows Marketplace allows users to purchase and/or download various programs to their computer for installation.
Enabling this feature doesn't prevent users from navigating to Windows Marketplace using other methods.
If this feature is disabled or isn't configured, the "Get new programs from Windows Marketplace" task link will be available to all users.
Note
If the "Hide Programs control Panel" setting is enabled, this setting is ignored.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
Tip
This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoWindowsMarketplace |
| Friendly Name | Hide "Windows Marketplace" |
| Location | User Configuration |
| Path | Control Panel > Programs |
| Registry Key Name | Software\Microsoft\Windows\CurrentVersion\Policies\Programs |
| Registry Value Name | NoWindowsMarketplace |
| ADMX File Name | Programs.admx |