Add, edit, or delete custom settings for Windows 10 or 11 devices

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; Cloud Identity Premium. Compare your edition

As an administrator, you can use custom settings to configure device settings and features on your organization’s Microsoft Windows 10 or 11 devices. This is a quick way to add policy settings that don't have a configuration control in the Admin console. For example, you might want to disallow the use of a device’s camera, configure firewall settings, or block unsigned apps.

Before you begin

• Google does not provide technical support for or accept responsibility for third-party products or settings. Consult the product’s website for the latest configuration and support information.
• To apply custom settings, enable Windows device management.

Add a new custom setting

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile and endpointsSettingsWindows.
3. Click Custom settings.
4. Click Add a custom setting.
5. Complete these fields:
   • Name: Enter a unique name for the custom setting to help you identify it in the settings list. Note: The name is updated if you select one of the pre-configured OMA-URI settings.
   • OMA-URI: This field provides autocomplete, so you can look up a device setting or feature added by Google. You can search for these by either feature name or Open Mobile Alliance Uniform Resource Identifier (OMA-URI) value. For example, specifying the word camera displays all the camera OMA-URI values. You can also do lookups by specific OMA-URI value, such as PreventEnablingLockScreenCamera.
   • Data type: The correct data type is set for the OMA-URI selected.
   • Value: Enter the data value you want to associate with the OMA-URI. The value depends on the OMA-URI data type.
   • Description (optional): Enter a description that gives an overview of the custom setting as well as any other important details.

   For examples, see Common custom settings for Windows 10 or 11 devices and Block applications with custom settings. For other settings, review the Microsoft documentation.

6. Click Next to go on and select the organizational unit the custom setting applies to, or click Add another to start another. Additional policies are not applied to an organizational unit until you click Next and select the organizational unit.
7. Choose the organizational unit to apply the policy to.
8. Click Apply.

Edit a custom setting

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile and endpointsSettingsWindows.
3. Click Custom settings.
4. On the left, click an organizational unit the custom setting applies to.
5. Point the custom setting you want to edit, then click Edit.
6. Update the name, value, or description, then click Apply. If the custom setting applies to a child organizational unit, you might click Override. Learn more about custom settings actions.

Delete a custom setting

When you delete a policy setting, the setting reverts to its state before the policy was applied.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile and endpointsSettingsWindows.
3. Click Custom settings.
4. On the left, click an organizational unit the custom setting applies to.
5. Check the box next to each custom setting you want to delete, then click Delete selected.
   • If the custom setting was inherited from a parent organizational unit, the policy is grayed out and it's inactive for that child organizational unit.
   • If the custom setting wasn't inherited, then it’s deleted.

Related topics

• Manage automatic updates for Windows 10 or 11 devices
• Install Google Credential Provider for Windows
• Custom settings for Windows 10 or 11 devices
• How the organizational structure works