Customer HubAvailable configurations
A policy is a collection of one or more configurations. Each policy can be applied to one or more devices at the same time. In addition, one or more policies can be associated with each device.
Available configurations
| Configuration | Description |
|---|---|
| Antivirus → | Manages antivirus settings |
| App compliance → | Manages app-specific restrictions (Windows 10 version 1511 or later, not available for Windows Home) |
| App Control → | Manages Windows Defender Application Control (WDAC) policies (Windows 10 version 1903 or later, not available for Windows Home) |
| Bitlocker → | Configures disk encryption (Enterprise and Education from Windows 10 version 1703, Pro from version 1809, not available for Windows Home) |
| BranchCache → | Configures BranchCache content caching (Windows 10 version 2004 or later, not available for Windows Home) |
| Certificate → | Selects a certificate to be installed on the device by default |
| Custom CSP → | Combines any CSP settings in a single configuration |
| Device name → | Configures the device name |
| E-mail → | Adds email configurations for multiple users |
| Exchange → | Manages Exchange accounts |
| Global proxies → | Configures global proxies (Windows 10 version 1703 or later, not available for Windows Home) |
| Local device security options | Manages policies for local device security options |
| Passcode → | Manages password policies |
| Remote desktop service → | Manages the Remote Desktop service |
| Restrictions → | Manages device restrictions |
| Script → | Manages automatic script execution based on events or schedules via the Relution Companion |
| Shared PC → | Manages the Windows Shared PC policy |
| Start menu → | Personalizes the Start menu (Windows 10 version 1703 or later, not available for Windows Home) |
| VPN → | Manages VPN settings (Windows 10 version 1607 or later, also available for Windows Home) |
| Wallpaper → | Manages the desktop and lock screen image, optionally with text and placeholders → (Windows 10 version 1709 or later, not available for Windows Home) |
| Wi-Fi → | Manages Wi-Fi settings |
| Windows Companion → | Manages the behavior of the Relution Companion for Windows: logging, app handling, server communication and automatic device user change |
| Windows Firewall → | Manages Windows Firewall settings (Windows 10 version 1709 or later, not available for Windows Home) |
| Windows Hello → | Manages the Windows Hello configuration |
| Windows Kiosk Mode → | Manages kiosk mode settings |
| Windows Licensing → | Manages the Windows licensing policy |
| Windows Office → | Deploys Microsoft Office via an externally created configuration XML (Windows 10 version 1703 or later, not available for Windows Home) |
| Windows Update → | Manages the Windows Update policy (Windows 10 version 1607 or later, not available for Windows Home) |
The configurations App Control, Custom CSP, E-mail, Exchange, Script, VPN, WiFi and Certificate can be added to a policy multiple times, all others only once. If a configuration that is allowed only once is already part of the policy, it is no longer offered in the selection dialog.
In the selection dialog, badges indicate the supported Windows editions and the respective minimum version; the details in brackets reflect these badges. Further limitations of the Home edition are described in Windows Home limitations →
The Script and Windows Companion configurations are applied by the Relution Companion for Windows →.
For the Wallpaper configuration, a configured text is not applied to the image by default as of Relution 26.5.5; devices receive the image without text. On self-hosted servers, text rendering is enabled via relution.wallpaper.text-rendering-enabled: true in the application.yml (environment variable RELUTION_WALLPAPER_TEXTRENDERINGENABLED). As of Relution 26.5.7, the server generates the image for each device when the policy is applied; if no image is set for the desktop or the lock screen, the device receives no image address for it. Images no longer used by any device are deleted once relution.wallpaper.cache.time (default 14 days) has elapsed.
The relution.wallpaper.require-signed-url option (as of Relution 26.5.6, default false) blocks older image addresses that devices received before the update. It is only enabled once all Windows wallpaper policies have been re-applied after the update; the same applies after the JWT signing key has changed.