This blog covers how you can control what users can and can't see in the settings app in Windows through Endpoint Manager.
RESTRICTING PARTS OF THE SETTINGS APP
You can use the device restrictions template to block whole sections of the settings app in Windows such as the Devices section. But what if you wanted users to only access the bluetooth page under the Devices section? This is where OMA-URI settings come in to let you get that fine grain control over what users can access.
The OMA-URI we are using here is the ./Device/Vendor/MSFT/Policy/Config/Settings/PageVisibilityList which allows you to filter down what you want your users to see.
Now when settings this up, you have two options:
- Show Only
- The pages and sections you define are shown, but everything else is hidden.
- If you put only show the System > About page then that's all the users will see.
- Hide
- Hide will only hide the pages you define in your Configuration Profile.
- If you say hide the VPN option under Network then every option in settigns will be shown but VPN.
To decide which option to use, depends on what you want blocking. Do you want to hide 90% of the settings options? Then use show only. If you only want to hide a few options then it'll be easier to use the Hide option.
CREATING THE OMA-URI CONFIGURATION PROFILE
Set up a new Configuration Profile and you want to use the Custom template to allow you to create a OMA-URI entry. For this entry, I have my setup below as an example
- The Name can be anything you want.
- OMA-URI is ./Device/Vendor/MSFT/Policy/Config/Settings/PageVisibilityList
- The value is your pages you want to block which is covered below.
BUILDING YOUR OMA-URI VALUE
The value starts with either showonly: or hide: depending on which one you want to choose. After that you need to use the URI name of the page you want to either hide or show then use the semicolons ; to separate them. Below is the URI values, you don't need to include the ms-settings part like shown in the configuration above.
These tables were taken from the Microsoft Docs site linked below
Launch the Windows Settings app - UWP applications | Microsoft Docs
No comments:
Post a Comment