Category: At least Windows 10 Server, Windows 10 or Windows 10 RT

Specifies the Start layout for users.This setting lets you specify the Start layout for users and prevents them from changing its configuration. The Start layout you specify must be stored in an XML file that was generated by the Export-StartLayout PowerShell cmdlet.To use this setting you must first manually configure a device’s Start layout to the desired look and feel. Once you are done run the Export-StartLayout PowerShell cmdlet on that same device. The cmdlet will generate an XML file representing the layout you configured.Once the XML file is generated and moved to the desired file path type the fully qualified path and name of the XML file. You can type a local path such as C: -> StartLayouts -> myLayout.xml or a UNC path such as -> -> Server -> Share -> Layout.xml. If the specified file is not available when the user logs on the layout won’t be changed. Users cannot customize their Start screen while this setting is enabled.If you disable this setting or do not configure it the Start screen layout won’t be changed and users will be able to customize it.

This policy setting controls whether some language features (for example spell checking dictionaries handwriting recognizers) can be uninstalled from the machine.

If you enable this policy setting in Pro and Enterprise SKUs you can defer upgrades till the next upgrade period (at least a few months). If you do not have it set you will receive upgrades once they are available that will be installed as part of your update policies. Security updates will not be impacted by this policy. For more information on available upgrades see windows.com/itpro.

This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. These controls are located under “Get Insider builds” and enable users to make their devices available for downloading and installing Windows preview software.If you enable or do not configure this policy setting users can download and install Windows preview software on their devices.If you disable this policy setting the item “Get Insider builds” will be unavailable.Note: This policy setting applies only to devices running the Pro Enterprise or Server editions of Windows 10.

Manages a Windows app’s ability to share data between users who have installed the app. If you enable this policy a Windows app can share app data with other instances of that app. Data is shared through the SharedLocal folder. This folder is available through the Windows.Storage API. If you disable this policy a Windows app can’t share app data with other instances of that app. If this policy was previously enabled any previously shared app data will remain in the SharedLocal folder.

This policy setting controls whether Windows Store apps with Windows Runtime API access directly from web content can be launched. If you enable this policy setting Windows Store apps with Windows Runtime API access directly from web content cannot be launched; Windows Store apps without Windows Runtime API access from web content are not affected. If you disable or do not configure this policy setting all Windows Store apps can be launched.

This policy setting allows the administrator to assign a specified credential provider as the default credential provider.If you enable this policy setting the specified credential provider is selected on other user tile.If you disable or do not configure this policy setting the system picks the default credential provider on other user tile.Note: A list of registered credential providers and their GUIDs can be found in the registry at HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Authentication -> Credential Providers.

This policy setting determines the amount of diagnostic and usage data reported to Microsoft. A value of 0 indicates that no telemetry data from OS components is sent to Microsoft. Setting a value of 0 is applicable to enterprise and server devices only. Setting a value of 0 for other devices is equivalent to choosing a value of 1. A value of 1 sends only a limited or basic amount of diagnostic and usage data. Note that setting values of 0 or 1 will degrade certain experiences on the device. A value of 2 sends enhanced diagnostic and usage data. A value of 3 sends the same data as a value of 2 plus additional diagnostics data such as the system state at the time of a hang or crash and the files and content that may have caused the problem.If you disable or do not configure this policy setting users can configure the Telemetry level in Settings.

This policy setting determines the level that Microsoft can experiment with the product to study user preferences or device behavior. A value of 1 permits Microsoft to configure device settings only. A value of 2 allows Microsoft to conduct full experimentations.If you disable this policy setting all experimentations will be turned off.If you do not configure this policy setting user can configure the “Let Microsoft try features on this build” option in Settings.