Windows 10 Team 支持的策略
本文列出了适用于 Surface Hub 操作系统的策略，Windows 10 协同版。
ApplicationDefaults
ApplicationManagement
蓝牙
- AllowAdvertising
- AllowDiscoverableMode
- AllowPrepairing
- AllowPromptedProximalConnections
- LocalDeviceName
- ServicesAllowedList
- SetMinimumEncryptionKeySize
浏览器
- AllowAddressBarDropdown
- AllowAutofill
- AllowBrowser
- AllowCookies
- AllowDeveloperTools
- AllowDoNotTrack
- AllowFlashClickToRun
- AllowMicrosoftCompatibilityList
- AllowPasswordManager
- AllowPopups
- AllowSearchSuggestionsinAddressBar
- AllowSmartScreen
- ClearBrowsingDataOnExit
- ConfigureAdditionalSearchEngines
- DisableLockdownOfStartPages
- EnterpriseModeSiteList
- 主页
- PreventLiveTileDataCollection
- PreventSmartScreenPromptOverride
- PreventSmartScreenPromptOverrideForFiles
- PreventUsingLocalHostIPAddressForWebRTC
- SetDefaultSearchEngine
相机
连接性
加密
- AllowFipsAlgorithmPolicy
- 配置EllipticCurveCryptography
- ConfigureSystemCryptographyForceStrongKeyProtection
- OverrideMinimumEnabledDTLSVersionClient
- OverrideMinimumEnabledDTLSVersionServer
- OverrideMinimumEnabledTLSVersionClient
- OverrideMinimumEnabledTLSVersionServer
- TLSCipherSuites
Defender
- AllowArchiveScanning
- AllowBehaviorMonitoring
- AllowCloudProtection
- AllowEmailScanning
- AllowFullScanOnMappedNetworkDrives
- AllowFullScanRemovableDriveScanning
- AllowIntrusionPreventionSystem
- AllowIOAVProtection
- AllowOnAccessProtection
- AllowRealtimeMonitoring
- AllowScanningNetworkFiles
- AllowScriptScanning
- AttackSurfaceReductionOnlyExclusions
- AttackSurfaceReductionRules
- AvgCPULoadFactor
- CheckForSignaturesBeforeRunningScan
- CloudBlockLevel
- CloudExtendedTimeout
- ControlledFolderAccessAllowedApplications
- ControlledFolderAccessProtectedFolders
- DaysToRetainCleanedMalware
- DisableCatchupFullScan
- DisableCatchupQuickScan
- EnableControlledFolderAccess
- EnableLowCPUPriority
- EnableNetworkProtection
- ExcludedExtensions
- ExcludedPaths
- ExcludedProcesses
- PUAProtection
- RealTimeScanDirection
- ScanParameter
- ScheduleQuickScanTime
- ScheduleScanDay
- ScheduleScanTime
- SecurityIntelligenceLocation
- SignatureUpdateFallbackOrder
- SignatureUpdateFileSharesSources
- SignatureUpdateInterval
- SubmitSamplesConsent
- ThreatSeverityDefaultAction
Defender 云解决方案提供商
- {GroupId}
- {RuleId}
- {ThreatId}
- AllowDatagramProcessingOnWinServer
- AllowNetworkProtectionDownLevel
- AllowNetworkProtectionOnWinServer
- AllowSwitchToAsyncInspection
- ArchiveMaxDepth
- ArchiveMaxSize
- ASROnlyPerRuleExclusions
- BehavioralNetworkBlocks
- BruteForceProtection
- BruteForceProtectionAggressiveness
- BruteForceProtectionConfiguredState
- BruteForceProtectionExclusions
- BruteForceProtectionLocalNetworkBlocking
- BruteForceProtectionMaxBlockTime
- BruteForceProtectionPlugins
- BruteForceProtectionSkipLearningPeriod
- 类别
- ComputerState
- 配置
- CurrentStatus
- DataDuplicationDirectory
- DataDuplicationLocalRetentionPeriod
- DataDuplicationMaximumQuota
- DataDuplicationRemoteLocation
- DaysUntilAggressiveCatchupQuickScan
- DefaultEnforcement
- DefenderEnabled
- DefenderVersion
- 检测
- DeviceControl
- DeviceControlEnabled
- DisableCacheMaintenance
- DisableCoreServiceECSIntegration
- DisableCoreServiceTelemetry
- DisableCpuThrottleOnIdleScans
- DisableDatagramProcessing
- DisableDnsOverTcpParsing
- DisableDnsParsing
- DisableFtpParsing
- DisableGradualRelease
- DisableHttpParsing
- DisableInboundConnectionFiltering
- DisableLocalAdminMerge
- DisableNetworkProtectionPerfTelemetry
- DisableQuicParsing
- DisableRdpParsing
- DisableSmtpParsing
- DisableSshParsing
- DisableTlsParsing
- EnableConvertWarnToBlock
- EnableDnsSinkhole
- EnableFileHashComputation
- EnableUdpReceiveOffload
- EnableUdpSegmentationOffload
- EngineUpdatesChannel
- EngineVersion
- ExcludedIpAddresses
- ExecutionStatus
- FullScanOverdue
- FullScanRequired
- FullScanSigVersion
- FullScanTime
- GroupData
- 健康
- HideExclusionsFromLocalAdmins
- HideExclusionsFromLocalUsers
- InitialDetectionTime
- IntelTDTEnabled
- IsVirtualMachine
- LastThreatStatusChangeTime
- MeteredConnectionUpdates
- 名称
- NetworkProtectionReputationMode
- NisEnabled
- NumberOfDetections
- OfflineScan
- OobeEnableRtpAndSigUpdate
- PassiveRemediation
- PerformanceModeStatus
- PlatformUpdatesChannel
- PolicyGroups
- PolicyRules
- ProductStatus
- QuickScanIncludeExclusions
- QuickScanOverdue
- QuickScanSigVersion
- QuickScanTime
- RandomizeScheduleTaskTimes
- RebootRequired
- RemoteEncryptionProtection
- RemoteEncryptionProtectionAggressiveness
- RemoteEncryptionProtectionConfiguredState
- RemoteEncryptionProtectionExclusions
- RemoteEncryptionProtectionMaxBlockTime
- RollbackEngine
- RollbackPlatform
- RtpEnabled
- RuleData
- 扫描
- ScanOnlyIfIdleEnabled
- SchedulerRandomizationTime
- ScheduleSecurityIntelligenceUpdateDay
- ScheduleSecurityIntelligenceUpdateTime
- SecuredDevicesConfiguration
- SecurityIntelligenceLocationUpdateAtScheduledTimeOnly
- SecurityIntelligenceUpdatesChannel
- 严重性
- SignatureOutOfDate
- SignatureVersion
- State
- SupportLogLocation
- 篡改保护
- TamperProtectionEnabled
- ThrottleForScheduledScanOnly
- UpdateSignature
- URL
DeliveryOptimization/
- DOAbsoluteMaxCacheSize
- DOAllowVPNPeerCaching
- DOCacheHost
- DOCacheHostSource
- DODelayBackgroundDownloadFromHttp
- DODelayCacheServerFallbackBackground
- DODelayCacheServerFallbackForeground
- DODelayForegroundDownloadFromHttp
- DODisallowCacheServerDownloadsOnVPN
- DODownloadMode
- DOGroupId
- DOGroupIdSource
- DOMaxBackgroundDownloadBandwidth
- DOMaxCacheAge
- DOMaxCacheSize
- DOMaxForegroundDownloadBandwidth
- DOMinBackgroundQos
- DOMinBatteryPercentageAllowedToUpload
- DOMinDiskSizeAllowedToPeer
- DOMinFileSizeToCache
- DOMinRAMAllowedToPeer
- DOModifyCacheDrive
- DOMonthlyUploadDataCap
- DOPercentageMaxBackgroundBandwidth
- DOPercentageMaxForegroundBandwidth
- DORestrictPeerSelectionBy
- DOSetHoursToLimitBackgroundDownloadBandwidth
- DOSetHoursToLimitForegroundDownloadBandwidth
- DOVpnKeywords
ExploitGuard
LocalUsersAndGroups
NetworkIsolation
- EnterpriseCloudResources
- EnterpriseInternalProxyServers
- EnterpriseIPRange
- EnterpriseIPRangesAreAuthoritative
- EnterpriseNetworkDomainNames
- EnterpriseProxyServers
- EnterpriseProxyServersAreAuthoritative
- NeutralResources
策略云解决方案提供商
隐私
- AllowInputPersonalization
- 禁用广告 ID
- LetAppsAccessAccountInfo
- LetAppsAccessAccountInfo_ForceAllowTheseApps
- LetAppsAccessAccountInfo_ForceDenyTheseApps
- LetAppsAccessAccountInfo_UserInControlOfTheseApps
- LetAppsAccessCalendar
- LetAppsAccessCalendar_ForceAllowTheseApps
- LetAppsAccessCalendar_ForceDenyTheseApps
- LetAppsAccessCalendar_UserInControlOfTheseApps
- LetAppsAccessCallHistory
- LetAppsAccessCallHistory_ForceAllowTheseApps
- LetAppsAccessCallHistory_ForceDenyTheseApps
- LetAppsAccessCallHistory_UserInControlOfTheseApps
- LetAppsAccessCamera
- LetAppsAccessCamera_ForceAllowTheseApps
- LetAppsAccessCamera_ForceDenyTheseApps
- LetAppsAccessCamera_UserInControlOfTheseApps
- LetAppsAccessContacts
- LetAppsAccessContacts_ForceAllowTheseApps
- LetAppsAccessContacts_ForceDenyTheseApps
- LetAppsAccessContacts_UserInControlOfTheseApps
- LetAppsAccessEmail
- LetAppsAccessEmail_ForceAllowTheseApps
- LetAppsAccessEmail_ForceDenyTheseApps
- LetAppsAccessEmail_UserInControlOfTheseApps
- LetAppsAccessLocation
- LetAppsAccessLocation_ForceAllowTheseApps
- LetAppsAccessLocation_ForceDenyTheseApps
- LetAppsAccessLocation_UserInControlOfTheseApps
- LetAppsAccessMessaging
- LetAppsAccessMessaging_ForceAllowTheseApps
- LetAppsAccessMessaging_ForceDenyTheseApps
- LetAppsAccessMessaging_UserInControlOfTheseApps
- LetAppsAccessMicrophone
- LetAppsAccessMicrophone_ForceAllowTheseApps
- LetAppsAccessMicrophone_ForceDenyTheseApps
- LetAppsAccessMicrophone_UserInControlOfTheseApps
- LetAppsAccessNotifications
- LetAppsAccessNotifications_ForceAllowTheseApps
- LetAppsAccessNotifications_ForceDenyTheseApps
- LetAppsAccessNotifications_UserInControlOfTheseApps
- LetAppsAccessPhone
- LetAppsAccessPhone_ForceAllowTheseApps
- LetAppsAccessPhone_ForceDenyTheseApps
- LetAppsAccessPhone_UserInControlOfTheseApps
- LetAppsAccessRadios
- LetAppsAccessRadios_ForceAllowTheseApps
- LetAppsAccessRadios_ForceDenyTheseApps
- LetAppsAccessRadios_UserInControlOfTheseApps
- LetAppsAccessTasks
- LetAppsAccessTasks_ForceAllowTheseApps
- LetAppsAccessTasks_ForceDenyTheseApps
- LetAppsAccessTasks_UserInControlOfTheseApps
- LetAppsAccessTrustedDevices
- LetAppsAccessTrustedDevices_ForceAllowTheseApps
- LetAppsAccessTrustedDevices_ForceDenyTheseApps
- LetAppsAccessTrustedDevices_UserInControlOfTheseApps
- LetAppsActivateWithVoice
- LetAppsActivateWithVoiceAboveLock
- LetAppsGetDiagnosticInfo
- LetAppsGetDiagnosticInfo_ForceAllowTheseApps
- LetAppsGetDiagnosticInfo_ForceDenyTheseApps
- LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
- LetAppsRunInBackground
- LetAppsRunInBackground_ForceAllowTheseApps
- LetAppsRunInBackground_ForceDenyTheseApps
- LetAppsRunInBackground_UserInControlOfTheseApps
- LetAppsSyncWithDevices
- LetAppsSyncWithDevices_ForceAllowTheseApps
- LetAppsSyncWithDevices_ForceDenyTheseApps
- LetAppsSyncWithDevices_UserInControlOfTheseApps
RestrictedGroups
安全性
- RecoveryEnvironmentAuthentication
- RequireProvisioningPackageSignature
- RequireRetrieveHealthCertificateOnBoot
“开始”菜单
系统
- AllowBuildPreview
- AllowExperimentation
- AllowFontProviders
- AllowLocation
- AllowStorageCard
- AllowTelemetry
TextInput
- AllowHardwareKeyboardTextSuggestions
- AllowIMELogging
- AllowIMENetworkAccess
- AllowInputPanel
- AllowJapaneseIMESurrogatePairCharacters
- AllowJapaneseIVSCharacters
- AllowJapaneseNonPublishingStandardGlyph
- AllowJapaneseUserDictionary
- AllowKeyboardTextSuggestions
- AllowLanguageFeaturesUninstall
- AllowLinguisticDataCollection
- AllowTextInputSuggestionUpdate
- 配置JapaneseIMEVersion
- ConfigureKoreanIMEVersion
- ConfigureSimplifiedChineseIMEVersion
- ConfigureTraditionalChineseIMEVersion
- EnableTouchKeyboardAutoInvokeInDesktopMode
- ExcludeJapaneseIMEExceptJIS0208
- ExcludeJapaneseIMEExceptJIS0208andEUDC
- ExcludeJapaneseIMEExceptShiftJIS
- ForceTouchKeyboardDockedState
- TouchKeyboardControllerModeAvailability
- TouchKeyboardDictationButtonAvailability
- TouchKeyboardEmojiButtonAvailability
- TouchKeyboardFullModeAvailability
- TouchKeyboardHandwritingModeAvailability
- TouchKeyboardNarrowModeAvailability
- TouchKeyboardSplitModeAvailability
- TouchKeyboardWideModeAvailability
TimeLanguageSettings
更新
- ActiveHoursEnd
- ActiveHoursMaxRange
- ActiveHoursStart
- AllowAutoUpdate
- AllowAutoWindowsUpdateDownloadOverMeteredNetwork
- AllowMUUpdateService
- AllowNonMicrosoftSignedUpdate
- AllowOptionalContent
- AllowTemporaryEnterpriseFeatureControl
- AllowUpdateService
- AlwaysAutoRebootAtScheduledTimeMinutes
- BranchReadinessLevel
- ConfigureFeatureUpdateUninstallPeriod
- DeferFeatureUpdatesPeriodInDays
- DeferQualityUpdatesPeriodInDays
- DeferUpdatePeriod
- DeferUpgradePeriod
- DetectionFrequency
- DisableDualScan
- DisableWUfBSafeguards
- DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection
- ExcludeWUDriversInQualityUpdate
- FillEmptyContentUrls
- IgnoreMOAppDownloadLimit
- IgnoreMOUpdateDownloadLimit
- ManagePreviewBuilds
- PauseDeferrals
- PauseFeatureUpdates
- PauseFeatureUpdatesStartTime
- PauseQualityUpdates
- PauseQualityUpdatesStartTime
- RequireDeferUpgrade
- RequireUpdateApproval
- ScheduledInstallDay
- ScheduledInstallEveryWeek
- ScheduledInstallFirstWeek
- ScheduledInstallFourthWeek
- ScheduledInstallSecondWeek
- ScheduledInstallThirdWeek
- ScheduledInstallTime
- SetPolicyDrivenUpdateSourceForDriverUpdates
- SetPolicyDrivenUpdateSourceForFeatureUpdates
- SetPolicyDrivenUpdateSourceForOtherUpdates
- SetPolicyDrivenUpdateSourceForQualityUpdates
- SetProxyBehaviorForUpdateDetection
- UpdateServiceUrl
- UpdateServiceUrlAlternate
Wifi
WirelessDisplay
- AllowMdnsAdvertisement
- AllowMdnsDiscovery
- AllowMovementDetectionOnInfrastructure
- AllowPCReceiverToBeTCPServer
- AllowPCSenderToBeTCPClient
- AllowProjectionFromPC
- AllowProjectionFromPCOverInfrastructure
- AllowProjectionToPC
- AllowProjectionToPCOverInfrastructure
- AllowUserInputFromWirelessDisplayReceiver
- RequirePinForPairing