List of Group policies migrated to MaaS360 Windows MDM policies using the SCCM Migration Tool
A list of Group policies that are migrated to MaaS360® Windows MDM policies when you use the SCCM Migration Tool.
The following table lists the Group policy name and its equivalent MaaS360 Windows MDM policy name.
Group policy name | MaaS360 Windows MDM policy name |
---|---|
Windows Components/App Package Deployment/Allows development of Windows Store apps and installing them from an integrated development environment (IDE) | Device security settings > Allow developer unlock |
Windows Components/BitLocker Drive Encryption/Fixed Data Drives/Deny write access to fixed drives not protected by BitLocker | Device encryption (Bit Locker) settings > Enforce device drive encryption |
Windows Components/BitLocker Drive Encryption/Removable Data Drives/Deny write access to removable drives not protected by BitLocker | Device encryption (Bit Locker) settings > Enforce removable drives encryption |
Windows Components/Microsoft Secondary Authentication Factor/Allow companion device for secondary authentication | Authentication and cryptography settings > Allow secondary authentication device |
Windows Components/App Package Deployment/Allow all trusted apps to install | App security settings > Allow installation of non-Windows store apps |
Windows Components/Store/Turn off Automatic Download and Install of updates | App security settings > Allow auto-update of Windows Store Apps |
Windows Components/Store/Disable all apps from Microsoft Store | App security settings > Disallow installed store apps |
Windows Components/Store/Only display the private store within the Microsoft Store | App security settings > Allow private store only |
Windows Components/App Package Deployment/Disable installing Windows apps on non-system volumes | App security settings > Restrict installation of apps to system drives |
Windows Components/App Package Deployment/Prevent users' app data from being stored on non-system volumes | App security settings > Restrict app data to system volume |
Windows Components/Camera/Allow Use of Camera | Device restrictions settings > Allow camera |
Windows Components/Search/Allow Cortana | Device restrictions settings > Allow Cortana |
Windows Components/Location and Sensors/Turn off location | Device restrictions settings > Allow location |
Windows Components/Sync your settings/Do not sync | Accounts and synchronization settings > Allow sync my settings |
Windows Components/Search/Allow search and Cortana to use location | Search restrictions settings > Allow search to use location |
Windows Components/Windows Update/Allow Automatic Updates immediate installation | Configure automatic update settings > Allow automatic updates |
Windows Components/Windows Update/Do not connect to any Windows Update Internet locations | Configure automatic update settings > Allow update service |
Windows Components/Windows Update/Specify intranet Microsoft update service location | Configure automatic update settings > Configure URL for update service |
Windows Components/Delivery Optimization/Download Mode | Peer selection settings > Delivery optimization method |
Windows Components/Delivery Optimization/Select the source of Group IDs | Peer selection settings > Group source |
Windows Components/Delivery Optimization/Enable Peer Caching while the device connects via VPN | Peer selection settings > Allow peer to peer caching on VPN |
Windows Components/Delivery Optimization/Max Cache Age (in seconds) | Content and device policy settings > Max cache age (in seconds) |
Windows Components/Delivery Optimization/Max Cache Size (percentage) | Content and device policy settings > Configure Install options |
Windows Components/Delivery Optimization/Minimum disk size allowed to use Peer Caching (in GB) | Content and device policy settings > Minimum disk size allowed to use peer caching (in GB) |
Windows Components/Delivery Optimization/Minimum Peer Caching Content File Size (in MB) | Content and device policy settings > Minimum peer caching content file size (in MB) |
Windows Components/Delivery Optimization/Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB) | Content and device policy settings > Minimum RAM capacity (inclusive) required to enable use of peer caching (in GB) |
Windows Components/Delivery Optimization/Max Upload Bandwidth (in KB/s) | Bandwidth throttling policy settings > Max upload bandwidth (in KB/s) |
Windows Components/Delivery Optimization/Absolute Max Cache Size (in GB) | Bandwidth throttling policy settings > Absolute max cache size (in GB) |
Windows Components/Delivery Optimization/Monthly Upload Data Cap (in GB) | Bandwidth throttling policy settings > Max monthly data upload limit (in GB) |
Windows Components/Delivery Optimization/Allow uploads while the device is on battery while under set Battery level (percentage) | Bandwidth throttling policy settings > Minimum battery required for peer uploads (percentage) |
Windows Components/Delivery Optimization/Minimum Background QoS (in KB/s) | Bandwidth throttling policy settings > Minimum download speed quality (in KB/s) |
Windows Components/Delivery Optimization/Maximum Foreground Download Bandwidth (percentage) | Bandwidth throttling policy settings > Maximum foreground download bandwidth (percentage) |
Windows Components/Delivery Optimization/Maximum Background Download Bandwidth (percentage) | Bandwidth throttling policy settings > Maximum background download bandwidth (percentage) |
Windows Components/Delivery Optimization/Delay Foreground download from http (in secs) | Bandwidth throttling policy settings > Delay HTTP downloads (by seconds) for foreground downloads |
Windows Components/Delivery Optimization/Delay background download from http (in secs) | Bandwidth throttling policy settings > Delay HTTP downloads (by seconds) for background downloads |
Windows Components/Delivery Optimization/Modify Cache Drive | Modify cache drive |
Windows Components/Windows Defender Antivirus/Scan/Specify the scan type to use for a scheduled scan | Customize scan settings and frequency settings > Scan type |
Windows Components/Windows Defender Antivirus/Scan/Specify the time of day to run a scheduled scan | Customize scan settings and frequency settings > Scan start time |
Windows Components/Windows Defender Antivirus/Scan/Specify the day of the week to run a scheduled scan | Customize scan settings and frequency settings > Scan frequency |
Windows Components/Windows Defender Antivirus/Signature Updates/Specify the interval to check for definition updates | Customize scan settings and frequency settings > Signature update frequency |
Windows Components/Windows Defender Antivirus/Scan/Scan archive files | Included file types for antivirus scan settings > Enforce scanning of archives |
Windows Components/Windows Defender Antivirus/Scan/Turn on e-mail scanning | Included file types for antivirus scan settings > Enforce scanning of emails |
Windows Components/Windows Defender Antivirus/Scan/Scan network files | Included file types for antivirus scan settings > Enforce scanning of network files |
Windows Components/Windows Defender Antivirus/Scan/Run full scan on mapped network drives | Included file types for antivirus scan settings > Enforce full scan on mapped network drives |
Windows Components/Windows Defender Antivirus/Real-time Protection/Configure monitoring for incoming and outgoing file and program activity | Included file types for antivirus scan settings > Allow bi-directional file scan |
Windows Components/Windows Defender Antivirus/Scan/Scan removable drives | Included file types for antivirus scan settings > Enforce full scan on removable drive |
Windows Components/Windows Defender Antivirus/Exclusions/Extension Exclusions | Excluded file types for scan settings > Excluded file types for scan |
Windows Components/Windows Defender Antivirus/Exclusions/Path Exclusions | Excluded file types for scan settings > Excluded file paths for scan |
Windows Components/Windows Defender Antivirus/Exclusions/Process Exclusions | Excluded file types for scan settings > Excluded processes for scan |
Windows Components/Windows Defender Antivirus/Real-time Protection/Turn off real-time protection | Advanced settings > Enable real-time protection |
Windows Components/Windows Defender Antivirus/Real-time Protection/Turn on behavior monitoring | Advanced settings > Enforce behavior monitoring |
Windows Components/Windows Defender Antivirus/MAPS/Join Microsoft MAPS | Advanced settings > Enforce cloud protection |
Windows Components/Windows Defender Antivirus/MAPS/Send file samples when further analysis is required | Advanced settings > Prompt for user consent before submitting Defender information |
Windows Components/Windows Defender Antivirus/Real-time Protection/Scan all downloaded files and attachments | Advanced settings > Enforce IOAV protection |
Windows Components/Windows Defender Antivirus/Scan/Specify the maximum percentage of CPU utilization during a scan | Advanced settings > Average CPU load factor |
Windows Components/Windows Defender Antivirus/Quarantine/Configure removal of items from Quarantine folder | Advanced settings > Days to retain cleaned malware |
Control Panel/Regional and Language Options/Allow users to enable online speech recognition services | Allow input personalization |
System/User Profiles/Turn off the advertising ID | Allow use of advertising ID |
Windows Components/Text Input/Improve inking and typing recognition | Speech and text input |
Windows Components/Speech/Allow Automatic Update of Speech Data | Speech and text input settings > Allow speech recognition models to update |
Windows Components/Windows Ink Workspace/Allow Windows Ink Workspace | Windows Ink settings > Allow Windows Ink workspace |
Windows Components/Windows Ink Workspace/Allow suggested apps in Windows Ink Workspace | Windows Ink settings > Allow suggested apps in Windows Ink workspace |
Windows Components/Text Input/Allow Uninstallation of Language Features | User experience and preferences settings > Allow changes to language settings |
Windows Components/Cloud Content/Turn off Microsoft consumer experiences | User experience and preferences settings > Allow Windows consumer features |
Windows Components/Cloud Content/Do not show Windows tips | User experience and preferences settings > Allow Windows tips |
Windows Components/Data Collection and Preview Builds/Do not show feedback notifications | User experience and preferences settings > Restrict feedback notification |
Network/WLAN Service/WLAN Settings/Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services | Network restrictions settings > Allow auto-connect to WiFi-Sense hotspots |
Network/Windows Connection Manager/Prohibit connection to roaming Mobile Broadband networks | Network restrictions settings > Allow mobile data roaming |
Network/Network Connections/Prohibit use of Internet Connection Sharing on your DNS domain network | Network restrictions settings > Allow internet sharing |
Windows Components/Connect/Don't allow this PC to be projected to | Wireless display settings > Allow projection to PC |
Windows Components/Connect/Require pin for pairing | Wireless display settings > Require PIN for pairing |
Windows Components/Microsoft Edge/Configure Start pages | Browser restrictions settings > Configure home page |
Windows Components/Microsoft Edge/Configure Pop-up Blocker | Browser restrictions settings > Allow pop-ups |
Windows Components/Microsoft Edge/Configure Do Not Track | Browser restrictions settings > Allow send do not track requests |
Windows Components/Microsoft Edge/Configure cookies | Browser restrictions settings > Accept cookies |
Windows Components/Microsoft Edge/Configure Autofill | Browser restrictions settings > Allow auto-fill form data |
Windows Components/Microsoft Edge/Configure Password Manager | Browser restrictions settings > Allow to save passwords |
Windows Components/Microsoft Edge/Configure search suggestions in Address bar | Browser restrictions settings > Allow search suggestion in address bar |
Windows Components/Microsoft Edge/Allow Developer Tools | Browser restrictions settings > Allow developer tools |
Windows Components/Microsoft Edge/Allow InPrivate browsing | Browser restrictions settings > Allow in private browsing |
Windows Components/Microsoft Edge/Allow Extensions | Browser restrictions settings > Allow extensions |
Windows Components/Microsoft Edge/Prevent access to the about:flags page in Microsoft Edge | Browser restrictions settings > Prevent access to change developer settings |
Windows Components/Microsoft Edge/Prevent using Localhost IP address for WebRTC | Browser restrictions settings > Restrict local host IP address for WebRTC |
Windows Components/Microsoft Edge/Configure the Enterprise Mode Site List | Browser restrictions settings > Allowed sites for Enterprise Compatibility Mode |
Windows Components/Search/Allow indexing of encrypted files | Found in the restrictions payload in syncML, but not available as a policy setting. |
Windows Components/Search/Allow use of diacritics | Found in the restrictions payload in syncML, but not available as a policy setting. |
Windows Components/Search/Always use automatic language detection when indexing content and properties | Found in the restrictions payload in syncML, but not available as a policy setting |