Feature Support by Windows Version

Note: Click here for a matrix of feature support for all device types.

Restrictions

Use this section to specify settings related to application and content restrictions. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Allow use of camera

Allow location service

Bluetooth device name

Allow bluetooth advertising

Allow bluetooth discovery

Allow media auto play

Allow manually removing enrollment

Allow storage card

Allow Siri/Cortana

Allow toasts (notifications)

Enable autofill

Force fraud warning

Internet scripting

Internet plugins

Internet popups blocked

Always send Do Not Track header

Go to intranet for single word

Diagnostics Submission

Data Roaming

Intranet security zone

Internet security zone

Intranet security zone

Trusted sites security zone

Restricted sites level

Is Microsoft Account Optional

Enable Windows Parental Controls.

Logging Enabled

Hourly Restrictions

Override Requests

App Restrictions

Allow games

Allow unrated Games

Maximum allowed game rating

Windows Defender

Use this section to specify settings related to Windows Defender. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Allow cloud-based protection

Allow archive scanning

Allow behavior monitoring

Allow email scanning

Allow full scan on mapped drives

Allow full scan on removable drives

Allow intrusion prevention functionality

Allow IOAV protection

Allow on access protection

Allow real-time protection

Allow scanning network files

Allow script scanning

Allow user to launch defender

Average CPU percentage for scans

Days to retain cleaned malware

Real-time scan direction

Scan type

Scheduled quick scan time

Scheduled scan day

Scheduled scan time

Update signature interval (hours)

Sample submission

Windows Update

Use this section to configure Windows updates. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Update method

Allow custom update server

Defer non-security upgrades

Passcode

Use this section to enforce passcode policies. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Disallow Convenience Logon

Password Complexity

Minimum passcode length

Minimum number of complex characters

Auto lock

Maximum passcode age (1-730 days or none)

Passcode history (1-50 passcodes or none)

Grace period for device lock

Maximum number of failed attempts

Wi-Fi

Use this section to configure how the device connects to your wireless network, including the necessary authentication information

Windows 8

Windows 8.1

EOBO

Windows 10

SSID

Auto join

Security type

Mail

Use this section to configure the device with POP and IMAP email accounts. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Account Description

Account Type

IMAP Path Prefix

User Display Name

Email Address

Do not allow user to move messages from this account

Allow Mail Drop

Send outgoing mail from this account using mail app only

Enable S/MIME

Incoming Email Server

Incoming Port Number

Incoming User Name

Incoming Authentication Type

Incoming Password

Retrieve emails through SSL

Outgoing Email Server

Outgoing Port Number

Outgoing User Name

Outgoing Authentication Type

Outgoing password same as incoming

Outgoing Password

Send emails through SSL

Exchange

Use this section to configure the device with Exchange ActiveSync accounts. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Internal Exchange ActiveSync host

Use SSL

User

Password

Past days of mail to sync

Do not allow user to move messages from this account

Exclude this account from recent address syncing

Send outgoing mail from this account using mail app only

Enable S/MIME

Calendar

Use this section to configure access to CalDAV servers. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Account description

Account hostname

Account username

Account password

Use SSL

Account port

Principal URL

Contacts

Use this section to configure access to CardDAV servers. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Account description

Account hostname

Account username

Account password

Use SSL

Account port

Principal URL

Web Shortcuts

Use this section to configure web shortcuts. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Label

URL

Web Content Filter

Use this section to specify allowed and blocked websites. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Block file downloads from the web

Filter level

Block unrated sites

VPN

Use this section to specify how the device will remotely connect to your network. (Users will not be able to modify these settings on their devices once the configuration profile is installed.)

Windows 8

Windows 8.1

EOBO

Windows 10

Connection Name

Connection Type

Server

Send All Traffic