
Browser customization SettingĬhoose what page opens every time someone begins a new Microsoft Edge browser session.Ĭhoose what page opens every time someone opens a new tab in Microsoft Edge.Ĭhoose what page appears when users click the home button in Microsoft Edge. As a result, the device is kept up-to-date with all of the latest apps, policies, and settings.īlock users from adding new provisioning packages that have device settings.īlock users from removing provisioning packages that have device settings.Ĭonfigure settings that affect the Microsoft Edge browser experience and user data. Autopilot Reset removes all user data–including user-installed apps and personal settings–and keeps the device enrolled in Intune. Settingīlock users from manually unenrolling devices from management.Įnable users with administrative rights to press CTRL+ Win + R on the device lock screen to trigger Autopilot Reset. Only allow users to install apps from the Microsoft Store for Education that your organization has set up.Īllow or block users from installing trusted apps that have signed certificates from Microsoft.Īllow or block users from installing apps with certificates that are unsigned, or signed by sources not trusted by Microsoft.īlock installing apps from places other than the Microsoft Store for Educationīlock users from installing apps from other sources and app stores.īlock automatic updates for Microsoft Store for Education appsīlock Microsoft Store for Education apps from being updated automatically.Įnable students on shared devices to share app dataĮnable students using the same app on the same device to share data.Ĭonfigure settings related to Intune for Education device enrollment. Require Microsoft Store for Education apps to be installed from the private store Learn what those apps are below.īlock students from opening apps that require administrative privileges.īlock installing apps from the Microsoft Store for Educationīlock users from installing apps from unauthorized locations. If you configure this setting, the tenant domain name will prepopulate, but is still editable.Ĭonfigure settings such as how users install and access apps on their devices. Use this setting if you want to force users to only use their Microsoft accounts for email.Ĭonfigure preferred Azure Active Directory tenant domainĮnables users to sign in to Windows without typing the domain name.

Settingīlock adding and signing in with personal Microsoft accountsīlock users from signing in with their Microsoft account.īlock adding and signing in with non-Microsoft accountsīlock users from adding any account other than their Microsoft account. Accounts and sign-inĬonfigure how users sign in to school devices. Tenant settings address the subscription and management settings for your organization.

User, app, and device settings differ from tenant settings.
