[Fix: Windows 8 Start Screen Live Tiles Won’t Update Beyond Specified Limit

0 views

Skip to first unread message

Virginie Fayad

unread,

Jun 12, 2024, 7:01:27 AM6/12/24

to coidockchisso

Intune may support more settings than the settings listed in this article. Not all settings are documented, and won't be documented. To see the settings you can configure, create a device configuration policy, and select Settings Catalog. For more information, go to Settings catalog.

Fix: Windows 8 Start Screen Live Tiles wont update beyond Specified Limit

Download ❤❤❤ https://t.co/bz0Mwghw1m

This article describes some of the settings you can control on Windows client devices. As part of your mobile device management (MDM) solution, use these settings to allow or disable features, set password rules, customize the lock screen, use Microsoft Defender, and more.

In a Windows 10/11 device restrictions profile, most configurable settings are deployed at the device level using device groups. Policies deployed to user groups apply to targeted users. The policies also apply to users who have an Intune license, and users that sign in to that device.

Auto-update apps from store: Block prevents updates from being automatically installed from the Microsoft Store. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow apps installed from the Microsoft Store to be automatically updated.

Trusted app installation: Choose if non-Microsoft Store apps can be installed, also known as sideloading. Sideloading is installing, and then running or testing an app that isn't certified by the Microsoft Store. For example, an app that is internal to your company only. Your options:

Shared user app data: Choose Allow to share application data between different users on the same device and with other instances of that app. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might prevent sharing data with other users and other instances of the same app.

Use private store only: Allow only allows apps to be downloaded from a private store, and not downloaded from the public store, including a retail catalog. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow apps to be downloaded from a private store and a public store.

Store originated app launch: Block disables all apps that were pre-installed on the device, or downloaded from the Microsoft Store. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow these apps to open.

Install app data on system volume: Block stops apps from storing data on the system volume of the device. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow apps to store data on the system disk volume.

Install apps on system drive: Block prevents apps from installing on the system drive on the device. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow apps to install on the system drive.

Apps from store only: This setting determines the user experience when users install apps from places other than the Microsoft Store. It doesn't prevent installation of content from USB devices, network shares, or other non-internet sources. Use a trustworthy browser to help make sure these protections work as expected.

User control over installations: Block prevents users from changing the installation options typically reserved for system administrators, such as entering the directory to install the files. When set to Not configured (default), Intune doesn't change or update this setting. By default, Windows Installer might prevent users from changing these installation options, and some of the Windows Installer security features are bypassed.

Install apps with elevated privileges: Block directs Windows Installer to use elevated permissions when it installs any program on the system. These privileges are extended to all programs. When set to Not configured (default), Intune doesn't change or update this setting. By default, the system might apply the current user's permissions when it installs programs that a system administrator doesn't deploy or offer.

Startup apps: Enter a list of apps to open after a user signs in to the device. Be sure to use a semi-colon delimited list of Package Family Names (PFN) of Windows applications. For this policy to work, the manifest in the Windows apps must use a startup task.

VPN over the cellular network: Block prevents the device from accessing VPN connections when connected to a cellular network. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow VPN to use any connection, including cellular.

VPN roaming over the cellular network: Block stops the device from accessing VPN connections when roaming on a cellular network. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow VPN connections when roaming.

Connected devices service: Block disables the Connected Devices Platform (CDP) component. CDP enables discovery and connection to other devices (through Bluetooth/LAN or the cloud) to support remote app launching, remote messaging, remote app sessions, and other cross-device experiences. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow the connected devices service, which enables discovery and connection to other Bluetooth devices.

Automatically connect to Wi-Fi hotspots: Block prevents devices from automatically connecting to Wi-Fi hotspots. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might let devices automatically connect to free Wi-Fi hotspots, and automatically accept any terms and conditions for the connection.

Manual Wi-Fi configuration: Block prevents devices from connecting to Wi-Fi outside of MDM server-installed networks. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to add and configure their own Wi-Fi connections network SSIDs.

Bluetooth discoverability: Block prevents the device from being discoverable by other Bluetooth-enabled devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow other Bluetooth-enabled devices, such as a headset, to discover the device.

Bluetooth pre-pairing: Block prevents specific Bluetooth devices to automatically pair with a host device. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow automatic pairing with the host device.

Bluetooth advertising: Block prevents the device from sending out Bluetooth advertisements. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow the device to send out Bluetooth advertisements.

Bluetooth proximal connections: Block prevents a device user from using Swift Pair and other proximity based scenarios. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow the device to send out Bluetooth advertisements.

Blocking or disabling these Microsoft account settings can impact enrollment scenarios that require users to sign in to Microsoft Entra ID. For example, you're using Autopilot pre-provisioned. Typically, users are shown a Microsoft Entra sign-in window. When these settings are set to Block or Disable, the Microsoft Entra sign-in option may not show. Instead, users are asked to accept the EULA, and create a local account, which may not be what you want.

Disable may also affect some enrollment scenarios that rely on users to complete the enrollment. For example, you're using Autopilot pre-provisioned. Typically, users are shown a Microsoft Entra sign-in window. When set to Disable, the Microsoft Entra sign-in option may not show. Instead, users are asked to accept the EULA, and create a local account, which may not be what you want.

System Time modification: Block prevents users from changing the date and time settings on the device. When set to Not configured (default), Intune doesn't change or update this setting. Users can change these settings.

Manual unenrollment: Block prevents users from deleting the workplace account using the workplace control panel on the device. When set to Not configured (default), Intune doesn't change or update this setting.

USB connection: Block prevents access to syncing files through a USB connection or using developer tools on a HoloLens device. Changing this policy doesn't affect USB charging. When set to Not configured (default), Intune doesn't change or update this setting. USB charging isn't affected by this setting.

Cortana: Block disables the Cortana voice assistant on the device. When Cortana is off, users can still search to find items on the device. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Cortana.