Windows Profile Settings

Feature

Description

Supported on

Home & Lock Screen Wallpaper

You can create a custom branding under Device Profiles & Policies > Branding section and then apply it in Device Profile. You will be able to select branding that is compatible with Windows.

Win 10 Pro

Win 10 Enterprise

Win 7

Win 8.1

Setting

Description

Bitlocker

BitLocker is Microsoft’s built-in full volume encryption feature which is designed to protect data by providing encryption for the hard disk volumes. To configure BitLocker settings and apply these settings to the Windows 10 managed devices, click here.

Windows Information Protector

Scalefusion helps you protect enterprise data on managed Windows 10 devices by providing Windows Information Protection policies or Enterprise Data Protection policies as they were earlier called. To know more about creating a Windows Information Protection Policy, click here

Windows Hello

Windows Hello for Business lets users access their device(s) using a PIN or Biometric authentication. To learn more about how Windows Hello settings can be configured and applied onto end user's devices, please click here.

Windows Defender

Microsoft's Windows Defender, now known as Microsoft Defender Antivirus provides real-time protection of Windows devices against software threats like viruses, malware, and spyware across email, apps, cloud, and the web. To configure Windows Defender policies, please click here.

Feature

Description

Supported on

Allow Device to connect Wifi

Choose to allow or restrict users to connect to Wifi.

Win 10 Pro

Win 10 Enterprise

Auto Configuring a Wifi

If you have created a Wifi configuration, then you can apply it to a Device Profile.

Win 10 Pro

Win 10 Enterprise

Allow users to configure Wifi

Use this option to allow/deny the end users to configure new Wifi connection on device.

Win 10 Pro

Win 10 Enterprise

Allow Auto Connect to WifiSense

Control if Wifi Sense should be used and connect automatically to shared networks or not.

Win 10 Pro

Win 10 Enterprise

Allow VPN Connections

Control if user is allowed to connect to VPN connections

Win 10 Pro

Win 10 Enterprise

Allow VPN usage on Cellular Data

Control if cellular data should be used  to connect to VPN connections

Win 10 Pro

Win 10 Enterprise

Allow VPN roaming on Cellular Data

Control if VPN should be allowed on roaming Cellular data.

Win 10 Pro

Win 10 Enterprise

Setting

Description

Remove Local Admin Privileges for Enrolled User

Enabling this setting removes admin privileges for the enrolled user and makes the user a standard user with no admin rights. The enrolled user cannot perform any of the admin actions then.

• Wait for BitLocker to be configured to remove admin privileges: This gets enabled only when the the main setting is enabled. If you are pushing Bitlocker policy as well, the admin privileges will be removed after Bitlocker settings are applied on device.

Auto Enroll to Modern Management

Enable this option if you are enrolling your devices via Agent based enrollment and want the devices to automatically enroll into Scalefusion modern management. This allows you to leverage both agent and modern management features on an agent enrolled Windows device.

Remove/Migrate device from 3rd party MDM (Modern Management).

A sub-setting of the above setting, this helps you easily migrate from your existing/older MDM solution. Enable this to remove the modern management of your older MDM and migrate them to Scalefusion completely. Please note,

1. This is an experimental option and may not work always and for all MDMs. You can check the status in Device Information > Full Device Information > Management Mode
2. This does not remove the agent apps or other applications installed by your previous MDM.
3. This does not free up your subscription/license of your previous MDM

Setting

Description

Show System Tray

Enable this to show a custom system tray panel with basic indicators of time, network and volume. Please note that this panel does not display 3rd party apps.

Setting

Description

Override Global Location Settings

If this is enabled, the settings which have been set through Location & Geofencing > Location Settings on Dashboard, get overridden. This also enables the rest of Location settings and makes them configurable.

Attempt to automatically Enable Location

With this setting toggled on, Scalefusion attempts to automatically enable location if it is set to off on the Windows device.

Enable/Disable Location Tracking

Enable this setting to turn on Location tracking and set other configurations.

Location Tracking Mode

There are three modes for tracking Location:

1. Basic
2. High Accuracy
3. Fleet Tracking
   These are accessible based on the plan you have purchased.

Location Collection Frequency

Choose a frequency in which the locations should be synced with server and reflected on dashboard. Frequencies differ on the basis of the Location Tracking Mode you have chosen

Select Location API

Select the preferred location method which will be used to capture location, from the following:

• Webkit: In this method, Scalefusion uses the Webkit to attempt to fetch location. This is the default and recommended setting for most devices as the results are more accurate compared to other methods.
• .Net APIs: In this, Scalefusion uses the .NET APIs to fetch the location.
• WinRT APIs: In this, Scalefusion uses the WindowsRT APIs to fetch the location.
• Google Maps API: Use this option if your organization uses Google Maps and has an API Key. Please note that your Google Maps account will be billed based on the location settings configured here.

API Type

Windows 7

Windows 8.1

.Net API

-

Yes

WinRT API

-

-

Google Maps API

Yes

Yes

WebKit API

Yes

Yes

Setting

Description

Scalefusion Sync Interval

Select the frequency in which Scalefusion syncs and updates the Device Info. The frequency levels can be:

• 15 minutes
• 30 minutes
• 1 hour
• 2 hours

Enable Broadcast Messages View

Enable this to be able to send one-way messages to managed Windows devices. With having this setting enabled IT admins can send Broadcast messages to Windows devices from Utilities > Broadcast Messages section on Dashboard.

USB Peripheral Settings

Check the following USB device types if you want to block the user from connecting and using them:

• Block Input Devices: When blocked the user would be prompted to restart the system whenever a new input device is detected.
• Block Media Devices
• Block Network Adapters
  For blocked devices, the USB Peripheral Report will reflect the status as Blocked but will still track the time duration for which it was connected with the Windows device

Feature

Description

Supported on

Cookie Policy

Choose a cookie Policy for Microsoft Edge. You can either allow the user to control or define strict policy for cookies.

Win 10 Pro

Win 10 Enterprise

Start Page URL

Specify a start URL that will be launched whenever the Edge browser is opened.

Win 10 Pro

Win 10 Enterprise

Auto Fill

Allow: Forces the autofill featureRestrict: Prevents using Autofill.User-Control: Lets  users choose to use the Autofill feature to populate the form fields automatically.

Win 10 Pro

Win 10 Enterprise

Pop Ups

Allow: Force pop-ups on all sites and turn off Pop-up blocker.

Restrict: Turn-on Pop-up Blocker which will block all the pop-ups.

User-Control: Let users control the Pop-up blocker.

Win 10 Pro

Win 10 Enterprise

Address Bar Dropdown

Allow:  Let Edge shows the address bar drop down list.Restrict: Minimizes network connections from Edge to Microsoft service, and hide the functionality of the Address bar drop-down list. It also disables the Show search and site suggestions as I type toggle in Settings.

Win 10 Pro

Win 10 Enterprise

Browser Extension

Allow: Let users to add or personalize extensions in Edge.Restrict: Prevent users from adding or personalizing extensions.

Win 10 Pro

Win 10 Enterprise

Clear Browsing history on Close

Allow: Clear the browsing history on exit.Restrict: Do not clear the browsing history on exit.User-Control: Let users configure the setting.

Win 10 Pro

Win 10 Enterprise

Allow accessing “about:flags”

Allow:  Lets users access the about:flags page in Edge, which is used to change developer settings and enable experimental features. ChooseRestrict: Prevents users from accessing the about:flags page.

Win 10 Pro

Win 10 Enterprise

Allow Flash

Allow: Allow Adobe flash to run.Restrict: Prevent Adobe flash to run.User-Control: Let users control on a per-site basis.

Win 10 Pro

Win 10 Enterprise

Autorun Flash

Allow: If Adobe flash is allowed then auto-run the flash files.Restrict:  If Adobe flash is allowed then prevent flash files from auto-running

Win 10 Pro

Win 10 Enterprise

Developer Tools

Allow: Allow users to use the F12 key and view the developer tools.Restrict: Prevent users to use the F12 key and view the developer tools.

Win 10 Pro

Win 10 Enterprise

In-Private Browsing

Allow: Allow in-private browsing.Restrict: Prevent in-private browsing.User-Control: Same as Allow

Win 10 Pro

Win 10 Enterprise

Save Passwords Locally

Allow: Lets Edge use Password manager to store passwords locally.Restrict: Prevent Edge from storing passwords locally.User-Control: Let users control when to save passwords locally.

Win 10 Pro

Win 10 Enterprise

Search suggestions in Address bar

Allow: Show search suggestions

Restrict: Block search suggestionsUser-Control: Let user control the search suggestion behaviour.

Win 10 Pro

Win 10 Enterprise

Force Fraudulent Website Warning

Allow: Force Windows Defender Smartscreen protection to prevent potential threats and prevent users from turning it off.Restrict: Turn off Windows Defender Smartscreen protection, leaves the user vulnerable to potential threats.User-Control: Let users choose if they want to use Windows Defender Smartscreen protection.

Win 10 Pro

Win 10 Enterprise

Override Fraudulent Websites warning

Allow: Let user’s ignore the warning and proceed to the site.Restrict: Does not allow users to ignore the warning and proceed to the site.User-Control: Same as allow..

Win 10 Pro

Win 10 Enterprise

Override malicious file warning

Allow: Allow users to download a potential malicious file or files from unverified sources.Restrict: Restrict users to download a potential malicious file or files from unverified sources.User-Control:Same as allow.

Win 10 Pro

Win 10 Enterprise

Allow "Do Not Track" request

Allow: Force Edge to send tracking information.Restrict: Prevent Edge from send tracking information.User-Control: Users can choose to send tracking information to sites they visit.

Win 10 Pro

Win 10 Enterprise

Feature

Description

Hide Switch Account

Use this setting to hide Switch user account option that is present on the left side of the Start menu

Hide Sign out

Use this setting to hide the Sign Out button that is present on the left side of the Start menu, under the Accounts icon (or picture)

Hide User tile

Tiling enables users to view each of their open programs or windows within a program simultaneously, rather than having to switch back and forth. Use this setting to hide start menu tiles for all users

Hide Change Account Settings

Accounts Settings allows you to manage your Microsoft Account, set your user picture, change sign-in options, change password, change PIN, connect your PC to work or school etc. It is present on the left side of the Start menu.

Use this setting to hide Change Account Settings option

Hide People Bar

The People feature adds a special icon to the notification area of your taskbar and allows pinning your contacts directly to the taskbar, so you can start messaging, call or compose an email just with one click.

Using this option, the People bar can be hidden.

Hide Lock

This option which is present under Switch Account, locks the computer but keep all the user's programs running. Hide the Lock feature through this setting.

Hide Hibernate

Hibernate option which is present in Start > Power, saves the current state of your PC—open programs and documents—to your hard disk and then turns off your PC. This feature can be hidden using Hide Hibernate settings.

Hide Sleep

Sleep feature present in Start > Power puts your system into a low-power state and turning off your display when you're not using it. Use this setting to Hide Sleep setting.

Hide Restart

This restarts your system. Use this setting to hide Restart

Hide Power Options

Hide all the power options present in Start menu, with this setting.

Hide Shutdown

The Shutdown feature which shuts down your system, can be hidden using this option.

Allow End Task

Allow or disallow End Task feature in Task Manager.

Feature

Description

Configure Display Off Timeout

Display off timeout is the amount of minutes Windows will wait idle with no activity while on the lock screen, before timing out and automatically turning off the display.

Configure the duration after which the display should timeout, through this setting

Configure Hibernate Timeout

Specify the duration of time after sleep that the system automatically wakes and enters hibernation.

Configure Unattended Sleep Timeout

The System unattended sleep timeout power setting is the idle timeout before the system returns to a low power sleep state after waking unattended. Specify a period of time before the system automatically enters sleep after waking from sleep in an unattended state.

Allow Stand By Device Sleep

Control your device's stand by behavior by choosing one of the options:

• User Control - Default option
• Enabled - If Enabled, the configure stand by timeout is active where you can configure the standby timeout duration
• Disabled - Disables stand by mode

Choose Lid Close Behavior

Select what the behavior should be when system lid is closed

Choose Sleep Button Behavior

Select what the behavior should be when Sleep button is pressed

Choose Power Button Behavior

Select what the behavior should be when Power button is pressed