Wifi

Allow WiFi

Allow or disallow WiFi connection. (Configurable by Exchange as well definition will be consistent with EAS definition.)

[Checked]

Allow Internet Sharing

Allow or disallow internet sharing (Configurable by Exchange as well definition will be consistent with EAS definition.)

[Checked]

Allow Auto Connect To WiFi Sense Hotspots

Allow or disallow the device to automatically connect to Wi-Fi hotspots and friend social network.

[Checked]

Allow WiFi HotSpot Reporting

Allow or disallow WiFi Hotspot information reporting to Microsoft. Once disallowed, the user cannot turn it on.

[Checked]

Allow Manual WiFi Configuration

Allow or disallow connecting to Wi-Fi outside of MDM server-installed networks.

[Checked]

WLAN Scan Mode

This policy defines the frequency mode for active Wi-Fi scanning trigger when the screen is off and on. A high setting would result in faster/better WiFi discoverability.

(Normal interval)

Connectivity

Allow NFC

Allow or disallow NFC.

[Checked]

Allow Bluetooth

Set Bluetooth mode.

[Checked]

Allow VPN Roaming Over Cellular

This policy when enforced will prevent the device from connecting VPN when the device roams over cellular networks.

[Checked]

Allow VPN Over Cellular

This policy specifies what type of underline connections a VPN is allowed to be used.

[Checked]

Allow Manual VPN Configuration

This policy allows the enterprise to enforce VPN protection by disabling all VPN settings. It prevents the user from manually configuring VPN settings that do not comply with company security policy.

[Checked]

Cellular App Download 20 MB Limit

This policy specifies the maximum app file size in MB allowed for downloading through a cellular connection. 20MB is the default limit if checked the operator imposed limit will be in effect.

[Not Checked]

Allow USB Connection

Allow/Disallow desktop to access phone storage via USB.(Both MTP and IPoUSB) are disabled when policy enforced.

[Checked]

Allow Cellular Data Roaming

Disable/enable SD card.

[Checked]

System

Allow Storage Card

Allow or disallow NFC.

[Checked]

Allow Telemetry

Allow the device to send telemetry information (such as SQM, Watson).

(Allowed)

Allow Location

Allow/Disallow location service.

(Allowed)

Allow User To Reset Phone

Specify whether to allow the user to factory reset the phone from setting control panel and hardware key combination.

[Checked]

Experience

Allow Copy Paste

Specify whether copy and paste are allowed.

[Checked]

Allow Task Switcher

This policy allows the company to disable the task switcher completely. It does not affect the back button action, just the visual switcher trigger by the holdback button action.

[Checked]

Allow Screen Capture

Specify whether screen capture is allowed.

[Checked]

Allow Voice Recording

Specify whether voice recording is allowed.

[Checked]

Allow Save As Of Office Files

Specify whether the user is allowed to save files in the device as an office file. Note that this policy is for the Office Hub only.

[Checked]

Allow Sharing Of Office Files

Specify whether the user is allowed to share the office file. Note that this policy is for the Office Hub only.

[Checked]

Allow Cortana

Specify whether Cortana is allowed at the device.

[Checked]

Allow Sync My Settings

Allow enterprise to disallow roaming settings among devices ( in/from WP device). If not enforced, whether roaming is allowed or not could depend on other factors.

[Checked]

Allow Manual MDM Unenrollment

Specify whether to allow the user to delete the workplace account via the workplace control panel.

[Checked]

Accounts

Allow Microsoft Account Connection

Specify whether allow using MSA account for non-email related connection authentication and services.

[Checked]

Allow Adding Non-Microsoft Accounts Manually

Specify whether the user is allowed to add non-MSA email accounts.

[Checked]

Security

Allow Manual Root Certificate Installation

Specify whether the user is allowed to manually install root and intermediate CAP certificates

[Checked]

Require Device Encryption

Allow enterprise to turn on internal storage encryption.

[Checked]

Allow Anti Theft Mode

Allows the enterprise to preventing users from enabling the Anti Theft mode. Note, if the user already enabled the Anti Theft mode for the device before the policy applied, they will have to manually disable the Anti Theft mode for this policy to take effect.

[Checked]

ApplicationManagement

Allow Store

Specify whether the app store is allowed at the device.

[Checked]

Allow Developer Unlock

Specify whether developer unlock is allowed at the device.

[Checked]

Browser

Allow Browser

Specify whether IE is allowed in the device.

[Checked]

Camera

Allow Camera

Disable/Enable camera

[Checked]

Search

Allow Search To Use Location

Specify whether the search could leverage location information.

[Checked]

Allow Storing Images From Vision Search

Specify whether allow BingVision to store the contents of the images captured when performing Bing Visio

[Checked]

AboveLock

Allow Action Center Notifications

Specify whether to allow action center notifications above the device lock screen.

[Checked]

DeviceLock

Allow Idle Return Without Password

Specify whether to allow action center notifications above the device lock screen.

[Checked]

DataProtection

Require Protection Under Lock Config

Allows data encryption of email data and associated attachments. A pin lock key is required to unlock and decode the content.

[Not Checked]

Enterprise Protected Domain Names

Specifies the enterprise domain names. Multiple domain names may be defined using the "|" character as the separator.

Example Contoso.com|Fabrikam.com

Default value: <empty>