Allow Windows Runtime apps to revoke enterprise data

Windows Runtime applications can protect content which has been associated with an enterprise identifier (EID) but can only revoke access to content it protected. To allow an application to revoke access to all content on the device that is protected by a particular enterprise add an entry to the list on a new line that contains the enterprise identifier separated by a comma and the Package Family Name of the application. The EID must be an internet domain belonging to the enterprise in standard international domain name format. Example value: Contoso. comContosoIT. HumanResourcesApp_m5g0r7arhahqy If you enable this policy setting the application identified by the Package Family Name will be permitted to revoke access to all content protected using the specified EID on the device. If you disable or do not configure this policy setting the only Windows Runtime applications that can revoke access to all enterprise-protected content on the device are Windows Mail and the user-selected mailto protocol handler app. Any other Windows Runtime application will only be able to revoke access to content it protected. Note: File revocation applies to all content protected under the same second level domain as the provided enterprise identifier. So revoking an enterprise ID of mail. contoso. com will revoke the user’s access to all content protected under the contoso. com hierarchy.

Prevent users from adding files to the root of their Users Files folder.

This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer. If you enable this policy setting users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. If you disable or do not configure this policy setting users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. Note: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%.

Display the menu bar in File Explorer

This policy setting configures File Explorer to always display the menu bar. Note: By default the menu bar is not displayed in File Explorer. If you enable this policy setting the menu bar will be displayed in File Explorer. If you disable or do not configure this policy setting the menu bar will not be displayed in File Explorer. Note: When the menu bar is not displayed users can access the menu bar by pressing the ‘ALT’ key.

Ignore custom consent settings

This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings. If you enable this policy setting the default consent levels of Windows Error Reporting always override any other consent policy setting. If you disable or do not configure this policy setting custom consent policy settings for error reporting determine the consent level for specified event types and the default consent setting determines only the consent level of any other error reports.

Customize consent settings

This policy setting determines the consent behavior of Windows Error Reporting for specific event types. If you enable this policy setting you can add specific event types to a list by clicking Show and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic non-fatal errors: crash no response and kernel fault errors. For each specified event type you can set a consent level of 0 1 2 3 or 4. – 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type. – 1 (Always ask before sending data): Windows prompts the user for consent to send reports. – 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution and Windows prompts the user for consent to send any additional data requested by Microsoft. – 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution as well as data which Windows has determined (within a high probability) does not contain personally identifiable data and prompts the user for consent to send any additional data requested by Microsoft. – 4 (Send all data): Any data requested by Microsoft is sent automatically. If you disable or do not configure this policy setting then the default consent settings that are applied are those specified by the user in Control Panel or in the Configure Default Consent policy setting.

Configure Report Queue

This policy setting determines the behavior of the Windows Error Reporting report queue. If you enable this policy setting you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default Windows determines when a problem occurs whether the report should be placed in the reporting queue or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue all reports are added to the queue until the user is prompted to send the reports or until the user sends problem reports by using the Solutions to Problems page in Control Panel. The Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder. If you disable or do not configure this policy setting Windows Error Reporting reports are not queued and users can only send reports at the time that a problem occurs.

Configure Default consent

This policy setting determines the default consent behavior of Windows Error Reporting. If you enable this policy setting you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting:- Always ask before sending data: Windows prompts users for consent to send reports. – Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically and Windows prompts users for consent to send any additional data that is requested by Microsoft. – Send parameters and safe additional data: the minimum data that is required to check for an existing solution along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically and Windows prompts the user for consent to send any additional data that is requested by Microsoft. – Send all data: any error reporting data requested by Microsoft is sent automatically. If this policy setting is disabled or not configured then the consent level defaults to the highest-privacy setting: Always ask before sending data.

List of applications to be excluded

This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on. If you enable this policy setting you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors click Show and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad. exe). File names must always include the . exe file name extension. To remove an application from the list click the name and then press DELETE. If this policy setting is enabled the Exclude errors for applications on this list setting takes precedence. If you disable or do not configure this policy setting errors are reported on all Microsoft and Windows applications by default.

Configure Report Archive

This policy setting controls the behavior of the Windows Error Reporting archive. If you enable this policy setting you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted. If you disable or do not configure this policy setting no Windows Error Reporting information is stored.