Support Center

Policies

NameOSDescription
Disable USB StorageLinuxThis policy prevents USB mass storage devices, such as flash drives and USB hard drives, from being used on the system. This policy works on all JumpCloud supported operating systems.
DictationMacThis policy manages the user's ability to leverage Dictation. This policy works on macOS 10.13+.
Disable Guest AccountMacThis policy disables the local Guest account. This policy works on all JumpCloud supported operating systems. Due to the behavior specific to macOS 10.13.2 and 10.13.3, the Guest account will still be available at the FileVault 2 login window.
Lock ScreenMacThe user's screen saver will lock after the amount of seconds specified. A password will be required to unlock the screen saver. This policy works on all JumpCloud supported operating systems.
Login Window ControlsMacThis policy controls the presentation of users at the login window on selected machines. This policy works on all JumpCloud supported operating systems.
Login Window TextMacThis policy manages the text presented at the login window on selected machines. This policy works on all JumpCloud supported operating systems.
Camera ControlMacThis policy manages the ability of an application to access and use the built-in camera. This policy works on all JumpCloud supported operating systems.
Disable CD/DVD ROMMacThis policy prevents mounting of optical media. This policy works on all JumpCloud supported operating systems.
Local Firewall ControlsMacThis policy manages the local host firewall settings. In order to enable 'Block All Incoming Connections' or 'Enable Stealth Mode', Firewall must be enabled. This policy works on macOS 10.12+.
AnalyticsMacThis policy controls the ability of the user to manage diagnostic reporting to Apple should an error occur. This policy works on macOS 10.13+.
Password ModificationMacThis policy manages the ability of the user to change their password through System Preferences on selected machines. This policy works on macOS 10.13+.
Power ControlsMacControl access to Shutdown, Restart, Sleep, and Power Off options at the login window and under the Apple menu. This policy works on all JumpCloud supported operating systems.
iTunes Music ServiceMacThis policy manages the ability of the system to use the Music feature in iTunes. This policy works on macOS 10.13+.
Spotlight Internet ResultsMacThis policy manages the ability of the system to include Internet results in a Spotlight search. This policy works on all JumpCloud supported operating systems.
Wallpaper ModificationMacThis policy manages the ability of the user to change their wallpaper through System Preferences on selected machines. This policy works on macOS 10.13+.
JumpCloud App ControlsMacThis policy controls the behavior of the JumpCloud Mac App on JumpCloud managed systems. This policy works on macOS 10.12+.
System Preferences ControlMacThe user will only be able to access the features of System Preferences allowed by the administrator. Checking the box adjacent to a given feature will cause that feature to no longer be accessible to target users. This policy works on all JumpCloud supported operating systems.
System Unlock ControlMacUsers on managed machines will only be able to access the System Unlock features allowed by an administrator. Any feature that is unselected will no longer be available for users on managed machines to modify. This policy works on macOS 10.12+.
System UpdateMacThis policy contains settings related to system updates. This policy works on macOS 10.13+.
Gatekeeper ControlMacThis policy controls the ability of the machine to install and run software by leveraging Gatekeeper in macOS. This policy works on all JumpCloud supported operating systems.
FileVault 2MacThis policy allows you to enable and enforce FileVault. (Only available for macOS 10.13+.)
App Store RestrictionsMacThis policy controls a user's ability to install applications from the Apple App Store. This policy works on all JumpCloud supported operating systems.
iCloud AccessMacUsers on managed machines will only be able to access the features of iCloud allowed by an administrator. Any feature that is unselected will no longer be available for users on managed machines to modify. This policy works on macOS 10.12+.
Disable External Disk (USB)MacThis policy prevents mounting of external disk volumes. This includes USB and SD flash devices. This policy works on all JumpCloud supported operating systems.
Disable SiriMacThis policy will disable all access to the Siri assistant. This policy works on macOS 10.12+.
Message Text For Users Attempting To Log OnWindowsThis policy specifies a text message & title caption that is displayed to users when they log on. This policy works on all JumpCloud supported operating systems.
Rename Local Administrator AccountWindowsThis policy allows the renaming of the inbuilt Local Administrator Account. This policy works on all JumpCloud supported operating systems.
Rename Local Guest AccountWindowsThis policy allows the renaming of the inbuilt Local Guest Account. This policy works on all JumpCloud supported operating systems.
Configure Windows UpdatesWindowsThis policy manages the system update behavior based on the options selected below. This policy works on all JumpCloud supported operating systems.
Disable Windows Spotlight FeaturesWindowsThis policy disables the system's ability to utilize Windows Spotlight. This policy works on Windows 10 Enterprise/Education.
Disable CD & DVD read accessWindowsThis policy disables the system's read access to CD & DVD removable storage classes. This policy works on all JumpCloud supported operating systems.
Built-in Guest Account StatusWindowsThis policy will disable or enable the built-in guest account. This policy works on all JumpCloud supported operating systems.
LogonWindowsControls the behavior of Logon in Windows. This policy works on all JumpCloud supported operating systems. However, individual settings may not be applicable to all versions of Windows.
Disable Windows Store & Universal Windows Platform ApplicationsWindowsThis policy disables the system's ability to launch Windows Store and all Universal Windows Platform Applications on the system. This policy works on Windows 10 Enterprise/Education.
Disable CortanaWindowsThis policy prevents the usage of Microsoft's Cortana on systems when applied. Users will still be able to leverage the search functionality on their system with Cortana disabled. This policy works on Windows 10.
BitLocker Full Disk EncryptionWindowsThis policy will enable and enforce BitLocker. If BitLocker is already enabled on the target system, it must have a single BitLocker numerical password set. This policy works on Windows 8.1 Pro/Enterprise, 10 Pro/Enterprise/Education (must have TPM 2.0). Learn More
Disable USB StorageWindowsThis policy prevents USB mass storage devices, such as flash drives and USB hard drives, from being used on the system. This policy works on all JumpCloud supported operating systems.
Restrict Control Panel AccessWindowsThe user will only be able to access the panes of the Control Panel allowed by the administrator. Checking the box adjacent to a given feature will cause that feature to no longer be visible to target users. This policy works on all JumpCloud supported operating systems.
Allow System To Be Shutdown Without Having To LogonWindowsThis policy will ensure the system is able to be shutdown from the logon screen. This policy works on all JumpCloud supported operating systems.
Display User Info When The Session Is LockedWindowsThis policy will ensure that the logged-in user's information will show or not show when the system is locked. It is advised to also enforce 'Do Not Display Last Username On Logon Screen' for this policy to be effective. This policy works on all JumpCloud supported operating systems.
Do Not Display Last Username on Logon ScreenWindowsThis policy will ensure that entering a username and password is required before logging into a system. This policy works on all JumpCloud supported operating systems.
Do Not Require CTRL+ALT+DEL on logon screenWindowsThis policy will ensure that CTRL+ALT+DEL is required before logging into a system. This policy works on all JumpCloud supported operating systems.
Restrict Settings App VisibilityWindowsThe user will only be able to access pages allowed by the administrator in the UWP Settings Application. Checking the box adjacent to a given page will hide that page from view. If all pages in a category are hidden, the category will also be hidden. Not all options will be present on every system, and labels may vary slightly from system to system. This policy works on Windows 10 (Build 1607 and later).
Turn Off Autoplay.WindowsThis policy will ensure that the system cannot launch autoplay features. This policy works on all JumpCloud supported operating systems.
Allow The Use Of BiometricsWindowsThis policy will ensure the system is able to use Windows Biometric Services. This policy works on all JumpCloud supported operating systems.
Allow Use Of CameraWindowsThis policy will control the use of camera devices on the system. This policy works on Windows 10, Server 2016.
Block Microsoft AccountsWindowsThis policy will prevent or allow users from adding or logging in with Microsoft Accounts. This policy works on Windows 8.1, 10.
Built-in Administrator Account StatusWindowsThis policy will disable or enable the built-in administrator account. It is advised to have an additional local administrator account to manage the system. This policy works on all JumpCloud supported operating systems.
Disable Windows Store ApplicationWindowsThis policy will ensure that system cannot launch the Windows Store application. This policy works on Windows 8.1, 10 Enterprise/Education.
Lock ScreenWindowsWhen a managed system is inactive for the length of time specified in the policy's configuration, the screen saver will activate and lock the machine. A password will be required for unlocking the machine. This policy works on all JumpCloud supported operating systems.
 

Last Updated: May 13, 2019 10:51AM MDT

Related Articles
desk-forwarding@jumpcloud.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete