This is an archive version of the document. To get the most up-to-date information, see the current version.

Supported Entra ID Item Properties

Veeam Backup for Microsoft Entra ID supports protection of the following Microsoft Entra ID items and their properties.

Users

Users

Property

Comments

AccountEnabled

—

AgeGroup

—

AppRoleAssignments

—

AssignedLicenses

—

BusinessPhones

—

City

—

CompanyName

—

ConsentProvidedForMinor

—

Country

—

CreatedDateTime

Read-only property in Entra ID.

Department

—

DirectReports

—

DisplayName

—

EmployeeId

—

EmployeeType

—

FaxNumber

—

GivenName

—

Identities

—

JobTitle

—

Mail

—

MailNickname

—

Manager

—

MemberOf

—

MobilePhone

—

OfficeLocation

—

OnPremisesDistinguishedName

Read-only property in Entra ID.

OnPremisesDomainName

Read-only property in Entra ID.

OnPremisesExtensionAttributes

—

OnPremisesImmutableId

—

OtherMails

—

OwnedObjects

—

PasswordPolicies

—

PostalCode

—

PreferredDataLocation

—

State

—

StreetAddress

—

Surname

—

UsageLocation

—

UserPrincipalName

—

UserType

—

Note

Besides the listed properties, Veeam Backup for Microsoft Entra ID also protects role assignments for the users. This role assignment protection is available for Microsoft Entra ID P2 and Governance tenant licenses.

Groups

Groups

Property

Comments

AllowExternalSenders

—

AppRoleAssignments

Not available for restore.

AssignedLabels

—

AssignedLicenses

—

Classification

—

CreatedDateTime

Read-only property in Entra ID.

Description

—

DisplayName

—

GroupTypes

—

IsAssignableToRole

Read-only property in Entra ID.

Mail

Read-only property in Entra ID.

MailEnabled

Read-only property in Entra ID.

MailNickname

—

MemberOf

—

Members

—

MembershipRule

—

MembershipRuleProcessingState

—

OnPremisesDomainName

Read-only property in Entra ID.

Owners

—

PreferredDataLocation

—

SecurityEnabled

—

Theme

—

Visibility

—

Administrative Units

Administrative Units

Property

Comments

Description

—

Visibility

—

DisplayName

—

Extensions

Not supported for restore.

Members

Can be restored only for non-hidden administrative units.

ScopedRoleMembers

Limited to directory role membership, custom role membership is not supported.

Roles

Roles

Property

Comments

Description

—

DisplayName

—

InheritsPermissionsFrom

—

IsBuiltIn

Read-only property in Entra ID.

IsEnabled

—

ResourceScopes

—

RolePermissions

—

TemplateId

—

Version

—

Applications

Applications

Property

Comments

AddIns

—

Api

—

AppId

Read-only property in Entra ID.

ApplicationTemplateId

Read-only property in Entra ID.

AppRoles

—

Certification

Read-only property in Entra ID.

CreatedDateTime

Read-only property in Entra ID.

Description

—

DisabledByMicrosoftStatus

Read-only property in Entra ID.

DisplayName

—

ExtensionProperties

—

FederatedIdentityCredentials

—

GroupMembershipClaims

—

IdentifierUris

—

Info

—

IsDeviceOnlyAuthSupported

—

IsFallbackPublicClient

—

Notes

—

Oauth2RequirePostResponse

—

OptionalClaims

—

Owners

—

ParentalControlSettings

—

PublicClient

—

PublisherDomain

Read-only property in Entra ID.

RequestSignatureVerification

—

RequiredResourceAccess

—

SamlMetadataUrl

—

ServiceManagementReference

—

ServicePrincipalLockConfiguration

—

SignInAudience

—

Spa

—

Tags

—

TokenEncryptionKeyId

Read-only property in Entra ID.

VerifiedPublisher

Read-only property in Entra ID.

Web

—

Service Principals

Service Principals

Property

Comments

AccountEnabled

—

AddIns

Read-only property. The property value is inherited from the associated application.

AlternativeNames

—

AppDescription

Read-only property. The property value is inherited from the associated application.

AppDisplayName

Read-only property. The property value is inherited from the associated application.

AppId

Read-only property in Entra ID.

ApplicationTemplateId

Read-only property in Entra ID.

AppManagementPolicies

Read-only property in Entra ID.

AppOwnerOrganizationId

Read-only property in Entra ID.

AppRoleAssignedTo

—

AppRoleAssignmentRequired

—

AppRoleAssignments

—

AppRole

Read-only property. The property value is inherited from the associated application.

Description

—

DisabledByMicrosoftStatus

Read-only property in Entra ID.

DisplayName

Read-only property. The property value is inherited from the associated application.

Endpoints

—

FederatedIdentityCredentials

Read-only property in Entra ID.

Homepage

Read-only property. The property value is inherited from the associated application.

Info

Read-only property. The property value is inherited from the associated application.

LoginUrl

—

LogoutUrl

Read-only property in Entra ID.

MemberOf

—

Notes

—

NotificationEmailAddresses

—

Oauth2PermissionGrants

—

Oauth2PermissionScopes

Read-only property. The property value is inherited from the associated application.

OwnedObjects

Read-only property in Entra ID.

Owners

—

PasswordCredentials

Read-only property in Entra ID.

PreferredSingleSignOnMode

—

ReplyUrls

Read-only property in Entra ID.

ResourceSpecificApplicationPermissions

Read-only property in Entra ID.

SamlSingleSignOnSettings

—

ServicePrincipalNames

Read-only property. The property value is inherited from the associated application.

ServicePrincipalType

Read-only property in Entra ID.

SignInAudience

Read-only property in Entra ID.

Tags

—

TokenEncryptionKeyId

Read-only property in Entra ID.

VerifiedPublisher

Read-only property in Entra ID.

Conditional Access Policies

Conditional Access Policies

Property

Comments

Conditions

—

CreatedDateTime

Read-only property in Entra ID.

DisplayName

—

GrantControls

—

ModifiedDateTime

Read-only property in Entra ID.

SessionControls

—

State

—

TemplateId

Read-only property in Entra ID.

Intune Policies A to B

Intune Policies A to B

AccountBlockModification

—

AccountManagerPolicy

—

AccountsBlockAddingNonMicrosoftAccountEmail

—

ActivationLockAllowWhenSupervised

—

ActiveHoursEnd

—

ActiveHoursStart

—

AirDropBlocked

—

AirDropForceUnmanagedDropTarget

—

AirPlayForcePairingPasswordForOutgoingRequests

—

AllowLocalStorage

—

AllowPrinting

—

AllowSampleSharing

—

AllowTextSuggestion

—

AllowWindows11Upgrade

—

AllowedAccounts

—

AppLockerApplicationControl

—

AppStoreBlockAutomaticDownloads

—

AppStoreBlockInAppPurchases

—

AppStoreBlockUIAppInstallation

—

AppStoreBlocked

—

AppStoreRequirePassword

—

AppleNewsBlocked

—

AppleWatchBlockPairing

—

AppleWatchForceWristDetection

—

ApplicationGuardAllowPersistence

—

ApplicationGuardAllowPrintToLocalPrinters

—

ApplicationGuardAllowPrintToNetworkPrinters

—

ApplicationGuardAllowPrintToPDF

—

ApplicationGuardAllowPrintToXPS

—

ApplicationGuardBlockClipboardSharing

—

ApplicationGuardBlockFileTransfer

—

ApplicationGuardBlockNonEnterpriseContent

—

ApplicationGuardEnabled

—

ApplicationGuardForceAuditing

—

ApplyOnlyToWindows81

—

ApplyOnlyToWindowsPhone81

—

AppsAllowTrustedAppsSideloading

—

AppsBlockClipboardSharing

—

AppsBlockCopyPaste

—

AppsBlockWindowsStoreOriginatedApps

—

AppsBlockYouTube

—

AppsHideList

—

AppsInstallAllowList

—

AppsLaunchBlockList

—

AppsSingleAppModeList

—

AppsVisibilityList

—

AppsVisibilityListType

—

AssetTagTemplate

—

Assignments

—

AutomaticUpdateMode

—

AutoRestartNotificationDismissal

—

AzureOperationalInsightsBlockTelemetry

—

AzureOperationalInsightsWorkspaceId

—

AzureOperationalInsightsWorkspaceKey

—

BitLockerDisableWarningForOtherDiskEncryption

—

BitLockerEnableStorageCardEncryptionOnMobile

—

BitLockerEnabled

—

BitLockerEncryptDevice

—

BitLockerRemovableDrivePolicy

—

BluetoothAllowedServices

—

BluetoothBlockAdvertising

—

BluetoothBlockDiscoverableMode

—

BluetoothBlockModification

—

BluetoothBlockPrePairing

—

BluetoothBlocked

—

BrowserBlockAutofill

—

BrowserBlockAutomaticDetectionOfIntranetSites

—

BrowserBlockEnterpriseModeAccess

—

BrowserBlockJavaScript

—

BrowserBlockPlugins

—

BrowserBlockPopups

—

BrowserBlockSendingDoNotTrackHeader

—

BrowserBlockSingleWordEntryOnIntranetSites

—

BrowserEnterpriseModeSiteListLocation

—

BrowserInternetSecurityLevel

—

BrowserIntranetSecurityLevel

—

BrowserLoggingReportLocation

—

BrowserRequireFirewall

—

BrowserRequireFraudWarning

BrowserRequireHighSecurityForRestrictedSites

—

BrowserRequireSmartScreen

—

BrowserTrustedSitesSecurityLevel

—

BusinessReadyUpdatesOnly

—

Intune Policies C to E

Intune Policies C to E

Property

Comments

CameraBlocked

—

CellularBlockDataRoaming

—

CellularBlockDataWhenRoaming

—

CellularBlockGlobalBackgroundFetchWhileRoaming

—

CellularBlockMessaging

Read-only property in Entra ID.

CellularBlockPerAppDataModification

—

CellularBlockPersonalHotspot

—

CellularBlockVoiceRoaming

Read-only property in Entra ID.

CellularBlockVpn

—

CellularBlockVpnWhenRoaming

—

CellularBlockWiFiTethering

—

CertificatesBlockManualRootCertificateInstallation

—

CertificatesBlockUntrustedTlsCertificates

—

ClassroomAppBlockRemoteScreenObservation

—

ClassroomAppForceUnpromptedScreenObservation

—

CodeIntegrityEnabled

—

CompliantAppListType

—

CompliantAppsList

—

ConfigurationAccount

—

ConfigurationProfileBlockChanges

—

ConnectAppBlockAutoLaunch

—

ConnectedDevicesServiceBlocked

—

CopyPasteBlocked

—

CortanaBlocked

—

CreatedDateTime

—

DeadlineForFeatureUpdatesInDays

—

DeadlineForQualityUpdatesInDays

—

DeadlineGracePeriodInDays

—

DefinitionLookupBlocked

—

DefenderAdditionalGuardedFolders

—

DefenderAttackSurfaceReductionExcludedPaths

—

DefenderBlockEndUserAccess

—

DefenderCloudBlockLevel

—

DefenderDaysBeforeDeletingQuarantinedMalware

—

DefenderDetectedMalwareActions

—

DefenderExploitProtectionXml

—

DefenderExploitProtectionXmlFileName

—

DefenderFileExtensionsToExclude

—

DefenderFilesAndFoldersToExclude

—

DefenderGuardedFoldersAllowedAppPaths

—

DefenderMonitorFileActivity

—

DefenderProcessesToExclude

—

DefenderPromptForSampleSubmission

—

DefenderRequireBehaviorMonitoring

—

DefenderRequireCloudProtection

—

DefenderRequireNetworkInspectionSystem

—

DefenderRequireRealTimeMonitoring

—

DefenderScanArchiveFiles

—

DefenderScanDownloads

—

DefenderScanIncomingMail

—

DefenderScanMappedNetworkDrivesDuringFullScan

—

DefenderScanMaxCpu

—

DefenderScanNetworkFiles

—

DefenderScanRemovableDrivesDuringFullScan

—

DefenderScanScriptsLoadedInInternetExplorer

—

DefenderScanType

—

DefenderScheduledQuickScanTime

—

DefenderScheduledScanTime

—

DefenderSecurityCenterBlockExploitProtectionOverride

—

DefenderSignatureUpdateIntervalInHours

—

DefenderSystemScanSchedule

—

DeliveryOptimizationMode

—

DeviceBlockEnableRestrictions

—

DeviceBlockEraseContentAndSettings

—

DeviceBlockNameModification

—

DeviceManagementBlockFactoryResetOnMobile

—

DeviceManagementBlockManualUnenroll

—

DeviceSettingStateSummaries

—

DeviceSharingAllowed

—

DeviceStatusOverview

—

DeviceThreatProtectionEnabled

—

DeviceThreatProtectionRequiredSecurityLevel

—

DiagnosticDataBlockSubmission

—

DiagnosticDataBlockSubmissionModification

—

DiagnosticsBlockDataSubmission

—

DiagnosticsDataSubmissionMode

—

DisableAccountManager

—

DisableEduPolicies

—

DisablePowerPolicies

—

DisableSignInOnResume

—

DisplayName

—

DocumentsBlockManagedDocumentsInUnmanagedApps

—

DocumentsBlockUnmanagedDocumentsInManagedApps

—

DriversExcluded

—

EarlyLaunchAntiMalwareDriverEnabled

—

EdgeAllowStartPagesModification

—

EdgeBlockAccessToAboutFlags

—

EdgeBlockAddressBarDropdown

—

EdgeBlockAutofill

—

EdgeBlockCompatibilityList

—

EdgeBlockDeveloperTools

—

EdgeBlockExtensions

—

EdgeBlockInPrivateBrowsing

—

EdgeBlockJavaScript

—

EdgeBlockLiveTileDataCollection

—

EdgeBlockPasswordManager

—

EdgeBlockPopups

—

EdgeBlockSearchSuggestions

—

EdgeBlockSendingDoNotTrackHeader

—

EdgeBlockSendingIntranetTrafficToInternetExplorer

—

EdgeClearBrowsingDataOnExit

—

EdgeCookiePolicy

—

EdgeDisableFirstRunPage

—

EdgeEnterpriseModeSiteListLocation

—

EdgeFirstRunUrl

—

EdgeHomepageUrls

—

EdgeRequireSmartScreen

—

EdgeSearchEngine

—

EdgeSendIntranetTrafficToInternetExplorer

—

EdgeSyncFavoritesWithInternetExplorer

—

EmailBlockAddingAccounts

—

EmailInDomainSuffixes

—

EnableExpeditedTelemetryReporting

—

Enabled

—

EngagedRestartDeadlineInDays

—

EngagedRestartSnoozeScheduleInDays

—

EngagedRestartTransitionScheduleInDays

—

EnterpriseAppBlockTrust

—

EnterpriseAppBlockTrustModification

—

EnterpriseCloudPrintDiscoveryEndPoint

—

EnterpriseCloudPrintDiscoveryMaxLimit

—

EnterpriseCloudPrintMopriaDiscoveryResourceIdentifier

—

EnterpriseCloudPrintOAuthAuthority

—

EnterpriseCloudPrintOAuthClientIdentifier

—

EnterpriseCloudPrintResourceIdentifier

—

ExperienceBlockDeviceDiscovery

—

ExperienceBlockDeviceDiscovery

—

ExperienceBlockErrorDialogWhenNoSIM

—

ExperienceBlockTaskSwitcher

—

Intune Policies F to L

Intune Policies F to L

Property

Comments

FaceTimeBlocked

—

FeatureUpdatesDeferralPeriodInDays

Read-only property in Entra ID.

FeatureUpdatesPaused

—

FeatureUpdatesPauseExpiryDateTime

—

FeatureUpdatesPauseStartDate

Read-only property in Entra ID.

FeatureUpdatesRollbackStartDateTime

—

FeatureUpdatesRollbackWindowInDays

—

FeatureUpdatesWillBeRolledBack

Read-only property in Entra ID.

FindMyFriendsBlocked

—

FirewallBlockAllIncoming

—

FirewallBlockStatefulFTP

—

FirewallCertificateRevocationListCheckMethod

—

FirewallEnabled

—

FirewallEnableStealthMode

—

FirewallIdleTimeoutForSecurityAssociationInSeconds

—

FirewallIPSecExemptionsAllowDHCP

—

FirewallIPSecExemptionsAllowICMP

—

FirewallIPSecExemptionsAllowNeighborDiscovery

—

FirewallIPSecExemptionsAllowRouterDiscovery

—

FirewallMergeKeyingModuleSettings

—

FirewallPacketQueueingMethod

—

FirewallPreSharedKeyEncodingMethod

—

FirewallProfileDomain

—

FirewallProfilePrivate

—

FirewallProfilePublic

—

GameCenterBlocked

—

GameDvrBlocked

—

GamingBlockGameCenterFriends

—

GamingBlockMultiplayer

—

GoogleAccountBlockAutoSync

—

GooglePlayStoreBlocked

—

HomeScreenDockIcons

—

HomeScreenPages

—

HostPairingBlocked

—

IBooksStoreBlocked

—

IBooksStoreBlockErotica

—

ICloudBlockActivityContinuation

—

ICloudBlockBackup

—

ICloudBlockDocumentSync

—

ICloudBlockManagedAppsSync

—

ICloudBlockPhotoLibrary

—

ICloudBlockPhotoStreamSync

—

ICloudBlockSharedPhotoStream

—

ICloudRequireEncryptedBackup

—

ITunesBlockExplicitContent

—

ITunesBlockMusicService

—

ITunesBlockRadio

—

IdleTimeBeforeSleepInSeconds

—

InstallationSchedule

—

InternetSharingBlocked

—

KioskAppDisplayName

—

KioskAppUserModelId

—

KioskModeAllowAssistiveSpeak

—

KioskModeAllowAssistiveTouchSettings

—

KioskModeAllowAutoLock

—

KioskModeAllowColorInversionSettings

—

KioskModeAllowRingerSwitch

—

KioskModeAllowScreenRotation

—

KioskModeAllowSleepButton

—

KioskModeAllowTouchscreen

—

KioskModeAllowVoiceOverSettings

—

KioskModeAllowVolumeButtons

—

KioskModeAllowZoomSettings

—

KioskModeAppStoreUrl

—

KioskModeApps

—

KioskModeBlockSleepButton

—

KioskModeBlockVolumeButtons

—

KioskModeBuiltInAppId

—

KioskModeManagedAppId

—

KioskModeRequireAssistiveTouch

—

KioskModeRequireColorInversion

—

KioskModeRequireMonoAudio

—

KioskModeRequireVoiceOver

—

KioskModeRequireZoom

—

LaunchUri

—

LastModifiedDateTime

—

License

—

LicenseType

—

LocationServicesBlocked

—

LockScreenAllowTimeoutConfiguration

—

LockScreenBlockActionCenterNotifications

—

LockScreenBlockControlCenter

—

LockScreenBlockCortana

—

LockScreenBlockNotificationView

—

LockScreenBlockPassbook

—

LockScreenBlockTodayView

—

LockScreenFootnote

—

LockScreenTimeoutInSeconds

—

LogonBlockFastUserSwitching

—

Intune Policies M to P

Intune Policies M to P

Property

Comments

MaintenanceStartTime

—

MaintenanceWindowBlocked

—

MaintenanceWindowDurationInHours

—

MaintenanceWindowStartTime

—

ManagedEmailProfileRequired

—

MediaContentRatingApps

—

MediaContentRatingAustralia

—

MediaContentRatingCanada

—

MediaContentRatingFrance

—

MediaContentRatingGermany

—

MediaContentRatingIreland

—

MediaContentRatingJapan

—

MediaContentRatingNewZealand

—

MediaContentRatingUnitedKingdom

—

MediaContentRatingUnitedStates

—

MessagesBlocked

—

MicrosoftAccountBlocked

—

MicrosoftAccountBlockSettingsSync

—

MicrosoftUpdateServiceAllowed

—

MinAndroidSecurityPatchLevel

—

MiracastBlocked

—

MiracastChannel

—

MiracastRequirePin

—

MobileOsMaximumVersion

—

MobileOsMinimumVersion

—

NetworkProxyApplySettingsDeviceWide

—

NetworkProxyAutomaticConfigurationUrl

—

NetworkProxyDisableAutoDetect

—

NetworkProxyServer

—

NetworkUsageRules

—

NfcBlocked

—

NotificationSettings

—

NotificationsBlockSettingsModification

—

OneDriveDisableFileSync

—

OsMaximumVersion

—

OsMinimumVersion

—

PasscodeBlockFingerprintModification

—

PasscodeBlockFingerprintUnlock

—

PasscodeBlockModification

—

PasscodeBlockSimple

—

PasscodeExpirationDays

—

PasscodeMinimumCharacterSetCount

—

PasscodeMinimumLength

—

PasscodeMinutesOfInactivityBeforeLock

—

PasscodeMinutesOfInactivityBeforeScreenTimeout

—

PasscodePreviousPasscodeBlockCount

—

PasscodeRequired

—

PasscodeRequiredType

—

PasscodeSignInFailureCountBeforeWipe

—

PasswordBlockFingerprintUnlock

—

PasswordBlockPicturePasswordAndPin

—

PasswordBlockSimple

—

PasswordBlockTrustAgents

—

PasswordExpirationDays

—

PasswordMinimumCharacterSetCount

—

PasswordMinimumLength

—

PasswordMinutesOfInactivityBeforeLock

—

PasswordMinutesOfInactivityBeforeScreenTimeout

—

PasswordPreviousPasswordBlockCount

—

PasswordRequired

—

PasswordRequiredToUnlockFromIdle

—

PasswordRequiredType

—

PasswordRequireToUnlockFromIdle

—

PasswordRequireWhenResumeFromIdleState

—

PasswordSignInFailureCountBeforeFactoryReset

—

Payload

—

PayloadFileName

—

PayloadName

—

PersonalizationDesktopImageUrl

—

PersonalizationLockScreenImageUrl

—

PodcastsBlocked

—

PostponeRebootUntilAfterDeadline

—

PowerOffBlocked

—

PrereleaseFeatures

—

PrivacyAdvertisingId

—

PrivacyAutoAcceptPairingAndConsentPrompts

—

PrivacyBlockInputPersonalization

—

ProductKey

—

Intune Policies Q to S

Intune Policies Q to S

Property

Comments

QualityUpdatesDeferralPeriodInDays

—

QualityUpdatesPaused

—

QualityUpdatesPauseExpiryDateTime

—

QualityUpdatesPauseStartDate

—

QualityUpdatesRollbackStartDateTime

—

QualityUpdatesWillBeRolledBack

—

RequireHealthyDeviceReport

—

ResetProtectionModeBlocked

—

SafariBlockAutofill

—

SafariBlocked

—

SafariBlockJavaScript

—

SafariBlockPopups

—

SafariCookieSettings

—

SafariManagedDomains

—

SafariPasswordAutoFillDomains

—

SafariRequireFraudWarning

—

SafeSearchFilter

—

ScheduleImminentRestartWarningInMinutes

—

ScheduleRestartWarningInHours

—

ScheduledActionsForRule

—

ScheduledInstallDays

—

ScreenCaptureBlocked

—

SearchBlockDiacritics

—

SearchDisableAutoLanguageDetection

—

SearchDisableIndexerBackoff

—

SearchDisableIndexingEncryptedItems

—

SearchDisableIndexingRemovableDrive

—

SearchEnableAutomaticIndexSizeManangement

—

SearchEnableRemoteQueries

—

SecureBootEnabled

—

SecurityBlockJailbrokenDevices

—

SecurityDisableUsbDebugging

—

SecurityPreventInstallAppsFromUnknownSources

—

SecurityRequireCompanyPortalAppIntegrity

—

SecurityRequireGooglePlayServices

—

SecurityRequireSafetyNetAttestationBasicIntegrity

—

SecurityRequireSafetyNetAttestationCertifiedDevice

—

SecurityRequireUpToDateSecurityProviders

—

SecurityRequireVerifyApps

—

SettingsBlockAccountsPage

—

SettingsBlockAddProvisioningPackage

—

SettingsBlockAppsPage

—

SettingsBlockChangeLanguage

—

SettingsBlockChangePowerSleep

—

SettingsBlockChangeRegion

—

SettingsBlockChangeSystemTime

—

SettingsBlockDevicesPage

—

SettingsBlockEaseOfAccessPage

—

SettingsBlockEditDeviceName

—

SettingsBlockGamingPage

—

SettingsBlockMyMeetingsAndFiles

—

SettingsBlockNetworkInternetPage

—

SettingsBlockPersonalizationPage

—

SettingsBlockPrivacyPage

—

SettingsBlockRemoveProvisioningPackage

—

SettingsBlockSessionResume

—

SettingsBlockSettingsApp

—

SettingsBlockSigninSuggestions

—

SettingsBlockSystemPage

—

SettingsBlockTimeLanguagePage

—

SettingsBlockUpdateSecurityPage

—

SettingsDefaultVolume

—

SettingsScreenTimeoutInMinutes

—

SettingsSessionTimeoutInMinutes

—

SettingsSleepTimeoutInMinutes

—

SharedUserAppDataAllowed

—

SkipChecksBeforeRestart

—

SiriBlocked

—

SiriBlockedWhenLocked

—

SiriBlockUserGeneratedContent

—

SiriRequireProfanityFilter

—

SmartScreenBlockOverrideForFiles

—

SmartScreenBlockPromptOverride

—

SmartScreenBlockPromptOverrideForFiles

—

SmartScreenEnableAppInstallControl

—

SmartScreenEnableInShell

—

SpotlightBlockInternetResults

—

StartBlockUnpinningAppsFromTaskbar

—

StartMenuAppListVisibility

—

StartMenuHideChangeAccountSettings

—

StartMenuHideFrequentlyUsedApps

—

StartMenuHideHibernate

—

StartMenuHideLock

—

StartMenuHidePowerButton

—

StartMenuHideRecentJumpLists

—

StartMenuHideRecentlyAddedApps

—

StartMenuHideRestartOptions

—

StartMenuHideShutDown

—

StartMenuHideSignOut

—

StartMenuHideSleep

—

StartMenuHideSwitchAccount

—

StartMenuHideUserTile

—

StartMenuLayoutEdgeAssetsXml

—

StartMenuLayoutXml

—

StartMenuMode

—

StartMenuPinnedFolderDocuments

—

StartMenuPinnedFolderDownloads

—

StartMenuPinnedFolderFileExplorer

—

StartMenuPinnedFolderHomeGroup

—

StartMenuPinnedFolderMusic

—

StartMenuPinnedFolderNetwork

—

StartMenuPinnedFolderPersonalFolder

—

StartMenuPinnedFolderPictures

—

StartMenuPinnedFolderSettings

—

StartMenuPinnedFolderVideos

—

StorageBlockGoogleBackup

—

StorageBlockRemovableStorage

—

StorageRequireDeviceEncryption

—

StorageRequireEncryption

—

StorageRequireMobileDeviceEncryption

—

StorageRequireRemovableStorageEncryption

—

StorageRestrictAppDataToSystemVolume

—

StorageRestrictAppInstallToSystemVolume

—

SystemIntegrityProtectionEnabled

—

Intune Policies T to W

Intune Policies T to W

Property

Comments

TargetEdition

Required property

TenantLockdownRequireNetworkDuringOutOfBoxExperience

—

UninstallBuiltInApps

—

UpdateNotificationLevel

Read-only property in Entra ID.

UpdateWeeks

—

UpdatesRequireAutomaticUpdates

—

UserAccountControlSettings

—

UserPauseAccess

—

UserStatusOverview

—

UserStatuses

—

UserWindowsUpdateScanAccess

—

UtcTimeOffsetInMinutes

—

Version

—

VoiceAssistantBlocked

—

VoiceDialingBlocked

—

VoiceRecordingBlocked

—

WebBrowserBlockAutofill

—

WebBrowserBlockJavaScript

—

WebBrowserBlockPopups

—

WebBrowserBlocked

—

WebBrowserCookieSettings

—

WebRtcBlockLocalhostIpAddress

—

WelcomeScreenBackgroundImageUrl

—

WelcomeScreenBlockAutomaticWakeUp

—

WelcomeScreenMeetingInformation

—

WiFiBlockAutomaticConnectHotspots

—

WiFiBlocked

—

WiFiBlockManualConfiguration

—

WiFiConnectOnlyToConfiguredNetworks

—

WiFiScanInterval

—

WifiBlockHotspotReporting

—

WindowsSpotlightBlockConsumerSpecificFeatures

—

WindowsSpotlightBlockOnActionCenter

—

WindowsSpotlightBlockTailoredExperiences

—

WindowsSpotlightBlockThirdPartyNotifications

—

WindowsSpotlightBlockWelcomeExperience

—

WindowsSpotlightBlockWindowsTips

—

WindowsSpotlightBlocked

—

WindowsSpotlightConfigureOnLockScreen

—

WindowsStoreBlockAutoUpdate

—

WindowsStoreBlocked

—

WindowsStoreEnablePrivateStoreOnly

—

WirelessDisplayBlockProjectionToThisDevice

—

WirelessDisplayBlockUserInputFromReceiver

—

WirelessDisplayRequirePinForPairing

—

WorkFoldersUrl

—

WorkProfileBlockAddingAccounts

—

WorkProfileBlockCamera

—

WorkProfileBlockCrossProfileCallerId

—

WorkProfileBlockCrossProfileContactsSearch

—

WorkProfileBlockCrossProfileCopyPaste

—

WorkProfileBlockNotificationsWhileDeviceLocked

—

WorkProfileBlockScreenCapture

—

WorkProfileBluetoothEnableContactSharing

—

WorkProfileDataSharingType

—

WorkProfileDefaultAppPermissionPolicy

—

WorkProfilePasswordBlockFingerprintUnlock

—

WorkProfilePasswordBlockTrustAgents

—

WorkProfilePasswordExpirationDays

—

WorkProfilePasswordMinLetterCharacters

—

WorkProfilePasswordMinLowerCaseCharacters

—

WorkProfilePasswordMinNonLetterCharacters

—

WorkProfilePasswordMinNumericCharacters

—

WorkProfilePasswordMinSymbolCharacters

—

WorkProfilePasswordMinUpperCaseCharacters

—

WorkProfilePasswordMinimumLength

—

WorkProfilePasswordMinutesOfInactivityBeforeScreenTimeout

—

WorkProfilePasswordPreviousPasswordBlockCount

—

WorkProfilePasswordRequiredType

—

WorkProfilePasswordSignInFailureCountBeforeFactoryReset

—

WorkProfileRequirePassword

—

Page updated 2026-06-02

Page content applies to build 13.0.2.29