(Windows) Profile Setting Types and Details

Profile settings list

Item / Details		Pro / Enterprise	Home
Password policy Note When you use a password policy, the following conditions are required for local accounts and Microsoft accounts. - The password must meet the following minimum requirements. - It must not contain the user's account name or part of the user's full name that is longer than 2 characters. - It must contain characters from 3 of the following 4 categories. - English uppercase letters (A to Z) - English lowercase letters (a to z) - Base 10 digits (0 - 9) - Special characters (!, $, #, %, etc.)	Minimum password length Specify the minimum password length.	Yes	Yes
	Time until device lock Specify the time until the device is forcibly locked.	Yes	Yes
	Password history Specify the number of password changes required before the same password can be reused.	Yes	Yes
	Number of failed sign-in attempts before restart Specify the number of times a password can be entered incorrectly.	Yes	Yes
	Password expiration Specify the number of days the same password can be used. Specify a half-width number from 1 to 730.	Yes	Yes
Restrictions (System)	Allow changing date and time (restart required)	Yes
	Allow location retrieval	Yes
	Allow use of the Cortana personal assistant (restart required)	Yes
	Allow removal of provisioning packages	Yes
	Allow manual withdrawal from MDM	Yes
	Require device encryption	Yes	Yes
Restrictions (Hardware)	Allow use of the camera	Yes
	Allow use of external storage (USB, SD card)	Yes
	Allow use of Bluetooth	Yes
Restrictions (Network)	Allow use of Wi-Fi	Yes
	Allow manual configuration of Wi-Fi settings	Yes
	Allow Internet sharing	Yes
	Allow location retrieval You can select from the following. Off Allow Force	Yes
	Allow use of telemetry Provides device information in the selected range to Microsoft. Security Basic Enhanced Full Note: Security information is provided only when the OS edition is Enterprise, Education, IoT Core, or 2016 Server.	Yes
Wi-Fi	You can configure the connection information for the Wi-Fi network that the device connects to.	Yes
Network proxy	You can configure the network proxy used by the device.	Yes	Yes
Exchange ActiveSync	You can configure the Exchange ActiveSync settings used by the device.	Yes	Yes
VPN	You can configure the connection information for the VPN that the device connects to.	Yes	Yes
Windows Update (Schedule)	Update option	Yes
	Active hours (start and end)	Yes
	Installation time	Yes
	Installation day	Yes
Windows Update (Options)	Get updates	Yes
	Exclude driver updates	Yes
	Branch readiness level	Yes
Windows Update (WSUS)	Enable WSUS Note: When enabled, the following settings are displayed.	Yes
	Server URL	Yes
	Update source	Yes
	Allow updates from trusted application developers	Yes
Windows Update (Defer updates) Note: If WSUS is enabled, the following settings do not take effect.	Defer feature updates	Yes
	Defer quality updates	Yes
	Pause feature updates	Yes
	Pause quality updates	Yes
WIP	You can configure settings for using Windows Information Protection (WIP). For details about WIP, see <a href="https://docs.microsoft.com/ja-jp/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip">WIP operation guide</a>.	Yes
Custom	You can configure settings for the OMA-DM-based administrative templates for Windows 10 provided by Microsoft.	Yes	Yes
Data wipe policy (offline data wipe)	If the device remains offline for a specified period, you can delete specified folders on the device.	Yes	Yes

If Profile is not compatible with the OS version is displayed on the Sync Status tab after applying a profile

This message is displayed when settings are applied to a device whose OS version differs from the one specified in the profile.
The message shows the profile restriction that caused the problem as a URI. Check the restriction in the table below, and then reset the profile restriction for the affected device to its default value.

URI and profile restriction mapping table

	OMA-URI	Profile restriction
System	./Vendor/MSFT/Policy/Config/Settings/AllowDateTime	Allow changing the time
	./Vendor/MSFT/Policy/Config/Experience/AllowScreenCapture	Allow screen capture
	./Vendor/MSFT/Policy/Config/Search/AllowSearchToUseLocation	Allow location retrieval
	./Vendor/MSFT/Policy/Config/Experience/AllowCortana	Allow use of the Cortana personal assistant
	./Vendor/MSFT/Policy/Config/AboveLock/AllowActionCenterNotifications	Allow actions on notifications
	./Vendor/MSFT/Policy/Config/Security/AllowManualRootCertificateInstallation	Allow manual installation of root certificates
	./Vendor/MSFT/Policy/Config/Security/AllowRemoveProvisioningPackage	Allow removal of provisioning packages
	./Vendor/MSFT/Policy/Config/ApplicationManagement/AllowStore	Allow use of the Store
	./Vendor/MSFT/Policy/Config/Browser/AllowBrowser	Allow use of the browser
	./Vendor/MSFT/Policy/Config/Experience/AllowManualMDMUnenrollment	Allow manual withdrawal from MDM
	./Vendor/MSFT/Policy/Result/Security/RequireDeviceEncryption	Require device encryption
Hardware	./Vendor/MSFT/Policy/Config/Camera/AllowCamera	Allow use of the camera
	./Vendor/MSFT/Policy/Config/System/AllowStorageCard	Allow use of external storage
	./Vendor/MSFT/Policy/Config/Connectivity/AllowUSBConnection	Allow USB connections
	./Vendor/MSFT/Policy/Config/Connectivity/AllowNFC	Allow use of NFC
	./Vendor/MSFT/Policy/Config/Connectivity/AllowBluetooth	Allow use of Bluetooth
Network	./Vendor/MSFT/Policy/Config/WiFi/AllowWiFi	Allow use of Wi-Fi
	./Vendor/MSFT/Policy/Config/WiFi/AllowManualWiFiConfiguration	Allow manual configuration of Wi-Fi settings
	./Vendor/MSFT/Policy/Config/WiFi/AllowInternetSharing	Allow Internet sharing
	./Vendor/MSFT/Policy/Config/System/AllowLocation	Allow location retrieval
	./Vendor/MSFT/Policy/Config/System/AllowTelemetry	Allow use of telemetry