Resource Type: dsc_intunedeviceconfigurationpolicywindows10

Defined in:

lib/puppet/type/dsc_intunedeviceconfigurationpolicywindows10.rb

Overview

The DSC IntuneDeviceConfigurationPolicyWindows10 resource type. Automatically generated from version 1.21.1222.1

Properties

• dsc_accountsblockaddingnonmicrosoftaccountemail

  Indicates whether or not to Block the user from adding email accounts to the device that are not associated with a Microsoft account.

• dsc_antitheftmodeblocked

  Indicates whether or not to block the user from selecting an AntiTheft mode preference (Windows 10 Mobile only).

• dsc_applicationid

  Id of the Azure Active Directory application to authenticate with.

• dsc_applicationsecret

  Secret of the Azure Active Directory tenant used for authentication.

• dsc_appsallowtrustedappssideloading

  Indicates whether apps from AppX packages signed with a trusted certificate can be side loaded. Possible values are: notConfigured, blocked, allowed.

• dsc_appsblockwindowsstoreoriginatedapps

  Indicates whether or not to disable the launch of all apps from Windows Store that came pre-installed or were downloaded.

• dsc_bluetoothallowedservices

  Specify a list of allowed Bluetooth services and profiles in hex formatted strings.

• dsc_bluetoothblockadvertising

  Whether or not to Block the user from using bluetooth advertising.

• dsc_bluetoothblockdiscoverablemode

  Whether or not to Block the user from using bluetooth discoverable mode.

• dsc_bluetoothblocked

  Whether or not to Block the user from using bluetooth.

• dsc_bluetoothblockprepairing

  Whether or not to block specific bundled Bluetooth peripherals to automatically pair with the host device.

• dsc_camerablocked

  Whether or not to Block the user from accessing the camera of the device.

• dsc_cellularblockdatawhenroaming

  Whether or not to Block the user from using data over cellular while roaming.

• dsc_cellularblockvpn

  Whether or not to Block the user from using VPN over cellular.

• dsc_cellularblockvpnwhenroaming

  Whether or not to Block the user from using VPN when roaming over cellular.

• dsc_certificatesblockmanualrootcertificateinstallation

  Whether or not to Block the user from doing manual root certificate installation.

• dsc_certificatethumbprint

  Thumbprint of the Azure Active Directory application’s authentication certificate to use for authentication.

• dsc_connecteddevicesserviceblocked

  Whether or not to block Connected Devices Service which enables discovery and connection to other devices, remote messaging, remote app sessions and other cross-device experiences.

• dsc_copypasteblocked

  Whether or not to Block the user from using copy paste.

• dsc_cortanablocked

  Whether or not to Block the user from using Cortana.

• dsc_defenderblockenduseraccess

  Whether or not to block end user access to Defender.

• dsc_defendercloudblocklevel

  Specifies the level of cloud-delivered protection. Possible values are: notConfigured, high, highPlus, zeroTolerance.

• dsc_defenderdaysbeforedeletingquarantinedmalware

  Number of days before deleting quarantined malware. Valid values 0 to 90

• dsc_defenderdetectedmalwareactions

  Gets or sets Defender’s actions to take on detected Malware per threat level.

• dsc_defenderfileextensionstoexclude

  File extensions to exclude from scans and real time protection.

• dsc_defenderfilesandfolderstoexclude

  Files and folder to exclude from scans and real time protection.

• dsc_defendermonitorfileactivity

  Value for monitoring file activity. Possible values are: userDefined, disable, monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly.

• dsc_defenderprocessestoexclude

  Processes to exclude from scans and real time protection.

• dsc_defenderpromptforsamplesubmission

  The configuration for how to prompt user for sample submission. Possible values are: userDefined, alwaysPrompt, promptBeforeSendingPersonalData, neverSendData, sendAllDataWithoutPrompting.

• dsc_defenderrequirebehaviormonitoring

  Indicates whether or not to require behavior monitoring.

• dsc_defenderrequirecloudprotection

  Indicates whether or not to require cloud protection.

• dsc_defenderrequirenetworkinspectionsystem

  Indicates whether or not to require network inspection system.

• dsc_defenderrequirerealtimemonitoring

  Indicates whether or not to require real time monitoring.

• dsc_defenderscanarchivefiles

  Indicates whether or not to scan archive files.

• dsc_defenderscandownloads

  Indicates whether or not to scan downloads.

• dsc_defenderscanincomingmail

  Indicates whether or not to scan incoming mail messages.

• dsc_defenderscanmappednetworkdrivesduringfullscan

  Indicates whether or not to scan mapped network drives during full scan.

• dsc_defenderscanmaxcpu

  Max CPU usage percentage during scan. Valid values 0 to 100

• dsc_defenderscannetworkfiles

  Indicates whether or not to scan files opened from a network folder.

• dsc_defenderscanremovabledrivesduringfullscan

  Indicates whether or not to scan removable drives during full scan.

• dsc_defenderscanscriptsloadedininternetexplorer

  Indicates whether or not to scan scripts loaded in Internet Explorer browser.

• dsc_defenderscantype

  The defender system scan type. Possible values are: userDefined, disabled, quick, full.

• dsc_defenderscheduledquickscantime

  The time to perform a daily quick scan.

• dsc_defenderscheduledscantime

  The defender time for the system scan.

• dsc_defendersignatureupdateintervalinhours

  The signature update interval in hours. Specify 0 not to check. Valid values 0 to 24

• dsc_defendersystemscanschedule

  Defender day of the week for the system scan. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday.

• dsc_description

  Display name of the device configuration policy for Windows 10.

• dsc_developerunlocksetting

  Indicates whether or not to allow developer unlock. Possible values are: notConfigured, blocked, allowed.

• dsc_devicemanagementblockfactoryresetonmobile

  Indicates whether or not to Block the user from resetting their phone.

• dsc_devicemanagementblockmanualunenroll

  Indicates whether or not to Block the user from doing manual un-enrollment from device management.

• dsc_diagnosticsdatasubmissionmode

  Gets or sets a value allowing the device to send diagnostic and usage telemetry data, such as Watson. Possible values are: userDefined, none, basic, enhanced, full.

• dsc_edgeallowstartpagesmodification

  Allow users to change Start pages on Edge. Use the EdgeHomepageUrls to specify the Start pages that the user would see by default when they open Edge.

• dsc_edgeblockaccesstoaboutflags

  Indicates whether or not to prevent access to about flags on Edge browser.

• dsc_edgeblockaddressbardropdown

  Block the address bar dropdown functionality in Microsoft Edge. Disable this settings to minimize network connections from Microsoft Edge to Microsoft services.

• dsc_edgeblockautofill

  Indicates whether or not to block auto fill.

• dsc_edgeblockcompatibilitylist

  Block Microsoft compatibility list in Microsoft Edge. This list from Microsoft helps Edge properly display sites with known compatibility issues.

• dsc_edgeblockdevelopertools

  Indicates whether or not to block developer tools in the Edge browser.

• dsc_edgeblocked

  Indicates whether or not to Block the user from using the Edge browser.

• dsc_edgeblockextensions

  Indicates whether or not to block extensions in the Edge browser.

• dsc_edgeblockinprivatebrowsing

  Indicates whether or not to block InPrivate browsing on corporate networks, in the Edge browser.

• dsc_edgeblockjavascript

  Indicates whether or not to Block the user from using JavaScript.

• dsc_edgeblocklivetiledatacollection

  Block the collection of information by Microsoft for live tile creation when users pin a site to Start from Microsoft Edge.

• dsc_edgeblockpasswordmanager

  Indicates whether or not to Block password manager.

• dsc_edgeblockpopups

  Indicates whether or not to block popups.

• dsc_edgeblocksearchsuggestions

  Indicates whether or not to block the user from using the search suggestions in the address bar.

• dsc_edgeblocksendingdonottrackheader

  Indicates whether or not to Block the user from sending the do not track header.

• dsc_edgeblocksendingintranettraffictointernetexplorer

  Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer. Note: the name of this property is misleading; the property is obsolete, use EdgeSendIntranetTrafficToInternetExplorer instead.

• dsc_edgeclearbrowsingdataonexit

  Clear browsing data on exiting Microsoft Edge.

• dsc_edgecookiepolicy

  Indicates which cookies to block in the Edge browser. Possible values are: userDefined, allow, blockThirdParty, blockAll.

• dsc_edgedisablefirstrunpage

  Block the Microsoft web page that opens on the first use of Microsoft Edge. This policy allows enterprises, like those enrolled in zero emissions configurations, to block this page.

• dsc_edgeenterprisemodesitelistlocation

  Indicates the enterprise mode site list location. Could be a local file, local network or http location.

• dsc_edgefirstrunurl

  The first run URL for when Edge browser is opened for the first time.

• dsc_edgehomepageurls

  The list of URLs for homepages shodwn on MDM-enrolled devices on Edge browser.

• dsc_edgerequiresmartscreen

  Indicates whether or not to Require the user to use the smart screen filter.

• dsc_edgesearchengine

  Allows IT admins to set a default search engine for MDM-Controlled devices. Users can override this and change their default search engine provided the AllowSearchEngineCustomization policy is not set.

• dsc_edgesendintranettraffictointernetexplorer

  Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer.

• dsc_edgesyncfavoriteswithinternetexplorer

  Enable favorites sync between Internet Explorer and Microsoft Edge. Additions, deletions, modifications and order changes to favorites are shared between browsers.

• dsc_ensure

  Present ensures the site collection exists, absent ensures it is removed

• dsc_enterprisecloudprintdiscoveryendpoint

  Endpoint for discovering cloud printers.

• dsc_enterprisecloudprintdiscoverymaxlimit

  Maximum number of printers that should be queried from a discovery endpoint. This is a mobile only setting. Valid values 1 to 65535

• dsc_enterprisecloudprintmopriadiscoveryresourceidentifier

  OAuth resource URI for printer discovery service as configured in Azure portal.

• dsc_enterprisecloudprintoauthauthority

  Authentication endpoint for acquiring OAuth tokens.

• dsc_enterprisecloudprintoauthclientidentifier

  GUID of a client application authorized to retrieve OAuth tokens from the OAuth Authority.

• dsc_enterprisecloudprintresourceidentifier

  OAuth resource URI for print service as configured in the Azure portal.

• dsc_experienceblockdevicediscovery

  Indicates whether or not to enable device discovery UX.

• dsc_experienceblockerrordialogwhennosim

  NIndicates whether or not to allow the error dialog from displaying if no SIM card is detected.

• dsc_experienceblocktaskswitcher

  Indicates whether or not to enable task switching on the device.

• dsc_gamedvrblocked

  Indicates whether or not to block DVR and broadcasting.

• dsc_internetsharingblocked

  Indicates whether or not to Block the user from using internet sharing.

• dsc_locationservicesblocked

  Indicates whether or not to Block the user from location services.

• dsc_lockscreenallowtimeoutconfiguration

  Specify whether to show a user-configurable setting to control the screen timeout while on the lock screen of Windows 10 Mobile devices. If this policy is set to Allow, the value set by lockScreenTimeoutInSeconds is ignored.

• dsc_lockscreenblockactioncenternotifications

  Indicates whether or not to block action center notifications over lock screen.

• dsc_lockscreenblockcortana

  Indicates whether or not the user can interact with Cortana using speech while the system is locked.

• dsc_lockscreenblocktoastnotifications

  Indicates whether to allow toast notifications above the device lock screen.

• dsc_lockscreentimeoutinseconds

  Set the duration (in seconds) from the screen locking to the screen turning off for Windows 10 Mobile devices. Supported values are 11-1800. Valid values 11 to 1800

• dsc_logonblockfastuserswitching

  Disables the ability to quickly switch between users that are logged on simultaneously without logging off.

• dsc_microsoftaccountblocked

  Indicates whether or not to Block a Microsoft account.

• dsc_microsoftaccountblocksettingssync

  Indicates whether or not to Block Microsoft account settings sync.

• dsc_networkproxyapplysettingsdevicewide

  If set, proxy settings will be applied to all processes and accounts in the device. Otherwise, it will be applied to the user account that’s enrolled into MDM.

• dsc_networkproxyautomaticconfigurationurl

  Address to the proxy auto-config (PAC) script you want to use.

• dsc_networkproxydisableautodetect

  Disable automatic detection of settings. If enabled, the system will try to find the path to a proxy auto-config (PAC) script.

• dsc_networkproxyserver

  Specifies manual proxy server settings.

• dsc_nfcblocked

  Indicates whether or not to Block the user from using near field communication.

• dsc_onedrivedisablefilesync

  Gets or sets a value allowing IT admins to prevent apps and features from working with files on OneDrive.

• dsc_passwordblocksimple

  Specify whether PINs or passwords such as ‘1111’ or ‘1234’ are allowed. For Windows 10 desktops, it also controls the use of picture passwords.

• dsc_passwordexpirationdays

  The password expiration in days. Valid values 0 to 730

• dsc_passwordminimumcharactersetcount

  The number of character sets required in the password.

• dsc_passwordminimumlength

  The minimum password length. Valid values 4 to 16

• dsc_passwordminutesofinactivitybeforescreentimeout

  The minutes of inactivity before the screen times out.

• dsc_passwordpreviouspasswordblockcount

  The number of previous passwords to prevent reuse of. Valid values 0 to 50

• dsc_passwordrequired

  Indicates whether or not to require the user to have a password.

• dsc_passwordrequiredtype

  The required password type. Possible values are: deviceDefault, alphanumeric, numeric.

• dsc_passwordrequirewhenresumefromidlestate

  Indicates whether or not to require a password upon resuming from an idle state.

• dsc_passwordsigninfailurecountbeforefactoryreset

  The number of sign in failures before factory reset. Valid values 0 to 999

• dsc_personalizationdesktopimageurl

  A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to used as the Desktop Image.

• dsc_personalizationlockscreenimageurl

  A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.

• dsc_privacyadvertisingid

  Enables or disables the use of advertising ID. Added in Windows 10, version 1607. Possible values are: notConfigured, blocked, allowed.

• dsc_privacyautoacceptpairingandconsentprompts

  Indicates whether or not to allow the automatic acceptance of the pairing and privacy user consent dialog when launching apps.

• dsc_privacyblockinputpersonalization

  Indicates whether or not to block the usage of cloud based speech services for Cortana, Dictation, or Store applications.

• dsc_resetprotectionmodeblocked

  Indicates whether or not to Block the user from reset protection mode.

• dsc_safesearchfilter

  Specifies what filter level of safe search is required. Possible values are: userDefined, strict, moderate.

• dsc_screencaptureblocked

  Indicates whether or not to Block the user from taking Screenshots.

• dsc_searchblockdiacritics

  Specifies if search can use diacritics.

• dsc_searchdisableautolanguagedetection

  Specifies whether to use automatic language detection when indexing content and properties.

• dsc_searchdisableindexerbackoff

  Indicates whether or not to disable the search indexer backoff feature.

• dsc_searchdisableindexingencrypteditems

  Indicates whether or not to block indexing of WIP-protected items to prevent them from appearing in search results for Cortana or Explorer.

• dsc_searchdisableindexingremovabledrive

  Indicates whether or not to allow users to add locations on removable drives to libraries and to be indexed.

• dsc_searchenableautomaticindexsizemanangement

  Specifies minimum amount of hard drive space on the same drive as the index location before indexing stops.

• dsc_searchenableremotequeries

  Indicates whether or not to block remote queries of this computer’s index.

• dsc_settingsblockaccountspage

  Indicates whether or not to block access to Accounts in Settings app.

• dsc_settingsblockaddprovisioningpackage

  Indicates whether or not to block the user from installing provisioning packages.

• dsc_settingsblockappspage

  Indicates whether or not to block access to Apps in Settings app.

• dsc_settingsblockchangelanguage

  Indicates whether or not to block the user from changing the language settings.

• dsc_settingsblockchangepowersleep

  Indicates whether or not to block the user from changing power and sleep settings.

• dsc_settingsblockchangeregion

  Indicates whether or not to block the user from changing the region settings.

• dsc_settingsblockchangesystemtime

  Indicates whether or not to block the user from changing date and time settings.

• dsc_settingsblockdevicespage

  Indicates whether or not to block access to Devices in Settings app.

• dsc_settingsblockeaseofaccesspage

  Indicates whether or not to block access to Ease of Access in Settings app.

• dsc_settingsblockeditdevicename

  Indicates whether or not to block the user from editing the device name.

• dsc_settingsblockgamingpage

  Indicates whether or not to block access to Gaming in Settings app.

• dsc_settingsblocknetworkinternetpage

  Indicates whether or not to block access to Network & Internet in Settings app.

• dsc_settingsblockpersonalizationpage

  Indicates whether or not to block access to Personalization in Settings app.

• dsc_settingsblockprivacypage

  Indicates whether or not to block access to Privacy in Settings app.

• dsc_settingsblockremoveprovisioningpackage

  Indicates whether or not to block the runtime configuration agent from removing provisioning packages.

• dsc_settingsblocksettingsapp

  Indicates whether or not to block access to Settings app.

• dsc_settingsblocksystempage

  Indicates whether or not to block access to System in Settings app.

• dsc_settingsblocktimelanguagepage

  Indicates whether or not to block access to Time & Language in Settings app.

• dsc_settingsblockupdatesecuritypage

  Indicates whether or not to block access to Update & Security in Settings app.

• dsc_shareduserappdataallowed

  Indicates whether or not to block multiple users of the same app to share data.

• dsc_smartscreenblockpromptoverride

  Indicates whether or not users can override SmartScreen Filter warnings about potentially malicious websites.

• dsc_smartscreenblockpromptoverrideforfiles

  Indicates whether or not users can override the SmartScreen Filter warnings about downloading unverified files

• dsc_smartscreenenableappinstallcontrol

  This property will be deprecated in July 2019 and will be replaced by property SmartScreenAppInstallControl. Allows IT Admins to control whether users are allowed to install apps from places other than the Store.

• dsc_startblockunpinningappsfromtaskbar

  Indicates whether or not to block the user from unpinning apps from taskbar.

• dsc_startmenuapplistvisibility

  Setting the value of this collapses the app list, removes the app list entirely, or disables the corresponding toggle in the Settings app. Possible values are: userDefined, collapse, remove, disableSettingsApp.

• dsc_startmenuhidechangeaccountsettings

  Enabling this policy hides the change account setting from appearing in the user tile in the start menu.

• dsc_startmenuhidefrequentlyusedapps

  Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.

• dsc_startmenuhidehibernate

  Enabling this policy hides hibernate from appearing in the power button in the start menu.

• dsc_startmenuhidelock

  Enabling this policy hides lock from appearing in the user tile in the start menu.

• dsc_startmenuhidepowerbutton

  Enabling this policy hides the power button from appearing in the start menu.

• dsc_startmenuhiderecentjumplists

  Enabling this policy hides recent jump lists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.

• dsc_startmenuhiderecentlyaddedapps

  Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.

• dsc_startmenuhiderestartoptions

  Enabling this policy hides ‘Restart/Update and Restart’ from appearing in the power button in the start menu.

• dsc_startmenuhideshutdown

  Enabling this policy hides shut down/update and shut down from appearing in the power button in the start menu.

• dsc_startmenuhidesignout

  Enabling this policy hides sign out from appearing in the user tile in the start menu.

• dsc_startmenuhidesleep

  Enabling this policy hides sleep from appearing in the power button in the start menu.

• dsc_startmenuhideswitchaccount

  Enabling this policy hides switch account from appearing in the user tile in the start menu.

• dsc_startmenuhideusertile

  Enabling this policy hides the user tile from appearing in the start menu.

• dsc_startmenulayoutedgeassetsxml

  This policy setting allows you to import Edge assets to be used with startMenuLayoutXml policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when startMenuLayoutXml policy is modified. The value should be a UTF-8 Base64 encoded byte array.

• dsc_startmenulayoutxml

  Allows admins to override the default Start menu layout and prevents the user from changing it. The layout is modified by specifying an XML file based on a layout modification schema. XML needs to be in a UTF8 encoded byte array format.

• dsc_startmenumode

  Allows admins to decide how the Start menu is displayed. Possible values are: userDefined, fullScreen, nonFullScreen.

• dsc_startmenupinnedfolderdocuments

  Enforces the visibility (Show/Hide) of the Documents folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfolderdownloads

  Enforces the visibility (Show/Hide) of the Downloads folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfolderfileexplorer

  Enforces the visibility (Show/Hide) of the FileExplorer shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfolderhomegroup

  Enforces the visibility (Show/Hide) of the HomeGroup folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfoldermusic

  Enforces the visibility (Show/Hide) of the Music folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfoldernetwork

  Enforces the visibility (Show/Hide) of the Network folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfolderpersonalfolder

  Enforces the visibility (Show/Hide) of the PersonalFolder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfolderpictures

  Enforces the visibility (Show/Hide) of the Pictures folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfoldersettings

  Enforces the visibility (Show/Hide) of the Settings folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_startmenupinnedfoldervideos

  Enforces the visibility (Show/Hide) of the Videos folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.

• dsc_storageblockremovablestorage

  Indicates whether or not to Block the user from using removable storage.

• dsc_storagerequiremobiledeviceencryption

  Indicating whether or not to require encryption on a mobile device.

• dsc_storagerestrictappdatatosystemvolume

  Indicates whether application data is restricted to the system drive.

• dsc_storagerestrictappinstalltosystemvolume

  Indicates whether the installation of applications is restricted to the system drive.

• dsc_tenantid

  Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com

• dsc_tenantlockdownrequirenetworkduringoutofboxexperience

  Whether the device is required to connect to the network.

• dsc_usbblocked

  Indicates whether or not to Block the user from USB connection.

• dsc_voicerecordingblocked

  Indicates whether or not to Block the user from voice recording.

• dsc_webrtcblocklocalhostipaddress

  Indicates whether or not user’s localhost IP address is displayed while making phone calls using the WebRTC

• dsc_wifiblockautomaticconnecthotspots

  Indicating whether or not to block automatically connecting to Wi-Fi hotspots. Has no impact if Wi-Fi is blocked.

• dsc_wifiblocked

  Indicates whether or not to Block the user from using Wi-Fi.

• dsc_wifiblockmanualconfiguration

  Indicates whether or not to Block the user from using Wi-Fi manual configuration.

• dsc_wifiscaninterval

  Specify how often devices scan for Wi-Fi networks. Supported values are 1-500, where 100 = default, and 500 = low frequency. Valid values 1 to 500

• dsc_windowsspotlightblockconsumerspecificfeatures

  Allows IT admins to block experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.

• dsc_windowsspotlightblocked

  Allows IT admins to turn off all Windows Spotlight features

• dsc_windowsspotlightblockonactioncenter

  Block suggestions from Microsoft that show after each OS clean install, upgrade or in an on-going basis to introduce users to what is new or changed

• dsc_windowsspotlightblocktailoredexperiences

  Block personalized content in Windows spotlight based on user’s device usage.

• dsc_windowsspotlightblockthirdpartynotifications

  Block third party content delivered via Windows Spotlight

• dsc_windowsspotlightblockwelcomeexperience

  Block Windows Spotlight Windows welcome experience

• dsc_windowsspotlightblockwindowstips

  Allows IT admins to turn off the popup of Windows Tips.

• dsc_windowsspotlightconfigureonlockscreen

  Specifies the type of Spotlight. Possible values are: notConfigured, disabled, enabled.

• dsc_windowsstoreblockautoupdate

  Indicates whether or not to block automatic update of apps from Windows Store.

• dsc_windowsstoreblocked

  Indicates whether or not to Block the user from using the Windows store.

• dsc_windowsstoreenableprivatestoreonly

  Indicates whether or not to enable Private Store Only.

• dsc_wirelessdisplayblockprojectiontothisdevice

  Indicates whether or not to allow other devices from discovering this PC for projection.

• dsc_wirelessdisplayblockuserinputfromreceiver

  Indicates whether or not to allow user input from wireless display receiver.

• dsc_wirelessdisplayrequirepinforpairing

  Indicates whether or not to require a PIN for new devices to initiate pairing.

Parameters

• dsc_credential

  Credentials of the Intune Admin

• dsc_displayname (namevar)

  Description of the device configuration policy for Windows 10.

• dsc_psdscrunascredential
• name (namevar)

  Description of the purpose for this resource declaration.

• validation_mode (defaults to: property)

  Whether to check if the resource is in the desired state by property (default) or using Invoke-DscResource in Test mode (resource).