Category: At least Windows Server 2012, Windows 8 or Windows RT

Denies or allows access to the Store application. If you enable this setting access to the Store application is denied. Access to the Store is required for installing app updates. If you disable or don’t configure this setting access to the Store application is allowed.

This policy setting controls the use of fast startup. If you enable this policy setting the system requires hibernate to be enabled. If you disable or do not configure this policy setting the local setting is used.

If you enable this policy a restart timer will always begin immediately after Windows Update installs important updates instead of first notifying users on the login screen for at least two days. The restart timer can be configured to start with any value from 15 to 180 minutes. When the timer runs out the restart will proceed even if the PC has signed-in users. If you disable or do not configure this policy Windows Update will not alter its restart behavior. If the “No auto-restart with logged on users for scheduled automatic updates installations” policy is enabled then this policy has no effect.

This policy specifies the path to a file (e. g. either stored locally or on a network location) that contains file type and protocol default application associations. This file can be created using the DISM tool. For example:Dism. exe /Online /Export-DefaultAppAssociations:C: -> AppAssoc. txt For more information refer to the DISM documentation on TechNet. If this group policy is enabled and the client machine is domain-joined the file will be processed and default associations will be applied at logon time. If the group policy is not configured disabled or the client machine is not domain-joined no default associations will be applied at logon time. If the policy is enabled disabled or not configured users will still be able to override default file type and protocol associations.

This policy setting determines whether remote paths can be used for file shortcut (. lnk file) icons. If you enable this policy setting file shortcut icons are allowed to be obtained from remote paths. If you disable or do not configure this policy setting file shortcut icons that use remote paths are prevented from being displayed. Note: Allowing the use of remote paths in file shortcut icons can expose users’ computers to security risks.

This policy setting allows you to specify a location where all default Library definition files for users/machines reside. If you enable this policy setting administrators can specify a path where all default Library definition files for users reside. The user will not be allowed to make changes to these Libraries from the UI. On every logon the policy settings are verified and Libraries for the user are updated or changed according to the path defined. If you disable or do not configure this policy setting no changes are made to the location of the default Library definition files.

This policy setting allows you to manage the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning users before running unrecognized programs downloaded from the Internet. Some information is sent to Microsoft about files and programs run on PCs with this feature enabled. If you enable this policy setting Windows SmartScreen behavior may be controlled by setting one of the following options:• Require approval from an administrator before running downloaded unknown software• Give user a warning before running downloaded unknown software• Turn off SmartScreenIf you disable or do not configure this policy setting Windows SmartScreen behavior is managed by administrators on the PC by using Windows SmartScreen Settings in Action Center. Options:• Require approval from an administrator before running downloaded unknown software• Give user a warning before running downloaded unknown software• Turn off SmartScreen

Shows or hides lock from the user tile menu. If you enable this policy setting the lock option will be shown in the User Tile menu. If you disable this policy setting the lock option will never be shown in the User Tile menu. If you do not configure this policy setting users will be able to choose whether they want lock to show through the Power Options Control Panel.