{"id":4774,"date":"2023-11-10T11:52:10","date_gmt":"2023-11-10T11:52:10","guid":{"rendered":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/?page_id=4774"},"modified":"2026-03-18T11:55:55","modified_gmt":"2026-03-18T11:55:55","slug":"windows-policies","status":"publish","type":"page","link":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/policies\/windows-policies\/","title":{"rendered":"Windows Policies"},"content":{"rendered":"
\n
\n

Windows Policies<\/h2>\n

The win_password<\/strong> dictionary can contain the following keys:<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n Default value <\/strong><\/th>\n<\/tr>\n<\/thead>\n
allow_simple<\/td>\nBoolean<\/td>\nOptional.<\/td>\ntrue<\/td>\n<\/tr>\n
require_alphanumeric<\/td>\nString<\/td>\nOptional.
\nValues can be alphanumeric<\/strong>, numeric<\/strong> or user_can_choose<\/strong>. <\/td>\n		user_can_choose<\/td>\n<\/tr>\n
min_length<\/td>\nInteger<\/td>\nOptional. Values can be from 4 to 16.<\/td>\n<\/td>\n<\/tr>\n
min_complex_chars<\/td>\nString<\/td>\nOptional. Values can be digits_only<\/strong>, digits_lower_letters<\/strong> or digits_lower_upper_letters<\/strong>.<\/td>\ndigits_only<\/td>\n<\/tr>\n
max_pinage_in_days<\/td>\nInteger<\/td>\nOptional. Values can be from 0<\/strong> to 730<\/strong>.<\/td>\n<\/td>\n<\/tr>\n
max_inactivity<\/td>\nInteger<\/td>\nOptional. Values can be from 0<\/strong> to 999<\/strong><\/td>\n<\/td>\n<\/tr>\n
pin_history<\/td>\nInteger<\/td>\nOptional. Possible values are from 0<\/strong> to 24<\/strong><\/td>\n<\/td>\n<\/tr>\n
max_failed_attempts<\/td>\nInteger<\/td>\nOptional.<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The win_wifi<\/strong> dictionary contains the following keys:<\/p>\n

\n\n\n\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n Default value <\/strong><\/th>\n<\/tr>\n<\/thead>\n
service_set_identifier<\/td>\nString<\/td>\nRequired<\/td>\n<\/td>\n<\/tr>\n
connection_mode<\/td>\nString<\/td>\nOptional. Values can be Auto, Manual.<\/td>\nAuto<\/td>\n<\/tr>\n
non_broadcast<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
security_type<\/td>\nString<\/td>\nRequired. Possible values are open<\/strong>, WEP<\/strong>, WPA-PSK\/WPA2-PSK<\/strong>, WPA\/WPA2 enterprise<\/strong><\/td>\nopen<\/td>\n<\/tr>\n
proxy_type<\/td>\nString<\/td>\nOptional. Values can be None and Manual<\/td>\nNone<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

If the security_type<\/strong> field is set to WEP, WPA-PSK\/WPA2-PSK, or WPA\/WPA2 enterprise<\/strong> the following fields must also be provided:<\/p>\n

\n\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n Default value <\/strong><\/th>\n<\/tr>\n<\/thead>\n
password<\/td>\nString<\/td>\nRequired<\/td>\n<\/td>\n<\/tr>\n
authentication<\/td>\nString<\/td>\nRequired if WPA-PSK\/WPA2-PSK, or WPA\/WPA2 enterprise is set. Values can be WPA, WPA2, or open.<\/td>\nopen<\/td>\n<\/tr>\n
eap_type<\/td>\nString<\/td>\nRequired if security_type<\/strong> is set to WPA\/WPA2<\/em>. Values can be PEAP-MSCHAPv2<\/strong> or EAP TLS<\/strong><\/td>\nEAP TLS<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

If the proxy_type<\/strong> field is set to Manual<\/strong> the following fields must also be provided:<\/p>\n

\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n<\/tr>\n<\/thead>\n
proxyserver<\/td>\nString<\/td>\nRequired. The proxy server\u2019s network address.<\/td>\n<\/tr>\n
proxy_server_port<\/td>\nInteger<\/td>\nRequired. The proxy server\u2019s port number.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The winvpnpolicy<\/strong> dictionary contains the following keys:<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n Default value <\/strong><\/th>\n<\/tr>\n<\/thead>\n
nativeprotocoltype<\/td>\nString<\/td>\nValues can be L2TP<\/strong>, PPTP<\/strong>, or IKEv2<\/strong>.<\/td>\nL2TP <\/td>\n<\/tr>\n
profilename<\/td>\nString<\/td>\nRequired. Specifies the profile name for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
server<\/td>\nString<\/td>\nRequired. Specifies the server address for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
advanceconnection<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
routelist<\/td>\nArray<\/td>\nRequired if advanceconnection is true. Specifies the list of routes for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
domainnameinfolist<\/td>\nArray<\/td>\nRequired if advanceconnection is true. Specifies the list of domain names for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
routingpolicytype<\/td>\nString<\/td>\nRequired if advanceconnection is true. Specifies the routing policy type for VPN connection. Values can be allows_traffic_through_vpn_and_local_network_connection or force_all_traffic_through_vpn<\/strong><\/td>\nallows_traffic_through_vpn_and_local_network_connection <\/td>\n<\/tr>\n
proxytype<\/td>\nString<\/td>\nOptional. Values can be none, manual or auto_detect.<\/strong><\/td>\nnone<\/td>\n<\/tr>\n
proxyserver<\/td>\nString<\/td>\nRequired if proxytype is manual. Specifies the proxy server for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
proxyurl<\/td>\nString<\/td>\nRequired if proxytype is auto_detect. Specifies the proxy server for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
connprcol<\/td>\nString<\/td>\nRequired if connection type is IKEv2. Specifies the connection protocol for the VPN connection. Values can be EAP or machine_certificate.<\/td>\nEAP<\/td>\n<\/tr>\n
userauth<\/td>\nString<\/td>\nThe user authentication type for the VPN connection. Values can be password or shared_secret.<\/td>\npassword<\/td>\n<\/tr>\n
presharedkey<\/td>\nString<\/td>\nRequired if the connection type is L2TP. The pre-shared key for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
traficfiltriplst<\/td>\nArray<\/td>\nThe list of traffic rules for the VPN connection.<\/td>\n<\/td>\n<\/tr>\n
remembrcredntil<\/td>\nBoolean<\/td>\nOptional. The option to remember credentials for the VPN connection.<\/td>\nfalse<\/td>\n<\/tr>\n
alwayson<\/td>\nBoolean<\/td>\nOptional. The option to enable always-on VPN for the connection.<\/td>\nfalse<\/td>\n<\/tr>\n
bypassforlocal<\/td>\nBoolean<\/td>\nOptional. The option to allow local intranet traffic to bypass the VPN connection.<\/td>\nfalse<\/td>\n<\/tr>\n
trustednetwork<\/td>\nString<\/td>\nThe trusted network for the VPN connection. Multiple entries should be comma-separated.<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The windows_defender<\/strong> dictionary contains the following keys:<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Argument<\/strong><\/th>\nType<\/strong><\/th>\n Description <\/strong><\/th>\n Default value <\/strong><\/th>\n<\/tr>\n<\/thead>\n
enable_application_guard<\/td>\nBoolean<\/td>\nRequired.<\/td>\nfalse<\/td>\n<\/tr>\n
clipboard_settings<\/td>\nString<\/td>\nRequired. Specifies the clipboard settings for the application guard. Values can be completely_turn_off_the_clipboard_functionality_for_the_application_guard, turn_on_clipboard_operation_from_an_isolated_session_to_the_host, turn_on_clipboard_operation_from_the_host_to_an_isolated_session, or turn_on_clipboard_operation_in_both_the_directions.<\/strong><\/td>\ncompletely_turn_off_the_clipboard_functionality_for_the_application_guard <\/td>\n<\/tr>\n
clipboard_file_type<\/td>\nString<\/td>\nRequired. Specifies allowed file types for clipboard operations in the application guard. Values can be allow_copying_texts<\/strong>, allow_copying images<\/strong>, or allow_copying_text_and_images<\/strong>. <\/td>\nallow_copying_texts <\/td>\n<\/tr>\n
printing_settings<\/td>\nArray<\/td>\nSpecifies the printing settings for the application guard.<\/td>\n<\/td>\n<\/tr>\n
block_non_enterprise_content<\/td>\nBoolean<\/td>\nOptional.<\/td>\nfalse<\/td>\n<\/tr>\n
allow_data_persistence<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
allow_virtual_gpu<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
save_files_to_host<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
certificate_thumbprints<\/td>\nString<\/td>\nSpecifies the certificate thumbprints for the application guard.<\/td>\n<\/td>\n<\/tr>\n
allow_camera_microphone_redirection<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
hide_account_protection_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_app_and_browser_protection_area<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
prevent_users_from_modifying_settings <\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
hide_device_security_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_tpm_firmware_update_recommendation<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
hide_tpm_troubleshooter_page<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
disable_clear_tpm_button<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_secure_boot_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
notifications<\/td>\nString<\/td>\nOptional. Specifies the notification settings for the application guard. Values can be display_all_notifications, display_only_critical_notifications, or disable_all_notifications.<\/strong><\/td>\ndisplay_all_notifications<\/td>\n<\/tr>\n
hide_family_options_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_device_performance_and_health_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_firewall_and_network_protection_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_virus_and_threat_protection_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
hide_ransomware_data_recovery_area<\/td>\nBoolean<\/td>\nOptional<\/td>\ntrue<\/td>\n<\/tr>\n
configure_customized_notifications<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
show_customized_contact_information<\/td>\nBoolean<\/td>\nOptional<\/td>\nfalse<\/td>\n<\/tr>\n
contact_company_name<\/td>\nString<\/td>\nRequired if \u2018show_customized_contact_information\u2019<\/strong> is true. Specifies the company name for customized contact information in the application guard.<\/td>\n<\/td>\n<\/tr>\n
contact_email<\/td>\nString<\/td>\nRequired if \u2018show_customized_contact_information\u2019<\/strong> is true and when \u2018contact_phone\u2019 and \u2018contact_website\u2019 fields are not specified. Specifies the email address for customized contact information in the application guard.<\/td>\n<\/td>\n<\/tr>\n
contact_phone<\/td>\nString<\/td>\nRequired if \u2018show_customized_contact_information\u2019<\/strong> is true. and when \u2018contact_email\u2019 and \u2018contact_website\u2019 fields are not specified. Specifies the phone number for customized contact information in the application guard.<\/td>\n<\/td>\n<\/tr>\n
contact_website<\/td>\nString<\/td>\nRequired if \u2018show_customized_contact_information\u2019<\/strong> is true and when \u2018contact_email\u2019 and \u2018contact_phone\u2019 fields are not specified. Specifies the website URL for customized contact information in the application guard.<\/td>\n<\/td>\n<\/tr>\n
hide_windows_security_systray<\/td>\nBoolean<\/td>\nOptional.<\/td>\nfalse<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The app_management<\/strong> dictionary can contain the following keys:<\/p>\n

\n\n\n\n\n\n\n\n\n
Argument <\/strong> <\/th>\n Type <\/strong> <\/th>\n Description <\/strong> <\/th>\n<\/tr>\n<\/thead>\n
whitelist_apps<\/td>\nDictionary<\/td>\nOptional. A dictionary containing the explicit keys app<\/strong> (whose value is a list of app IDs) and group<\/strong> (whose value is a list of app group IDs). <\/td>\n<\/tr>\n
blacklist_apps<\/td>\nDictionary<\/td>\nOptional. A dictionary containing the explicit keys app<\/strong> (whose value is a list of app IDs) and group<\/strong> (whose value is a list of app group IDs). <\/td>\n<\/tr>\n
mandatory_apps<\/td>\nDictionary<\/td>\nOptional. A dictionary containing the explicit keys app<\/strong> (whose value is a list of app IDs) and group<\/strong> (whose value is a list of app group IDs). <\/td>\n<\/tr>\n
catalogues<\/td>\nList \/ Array<\/td>\nOptional. List of integers representing the corresponding catalogue IDs.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n
\n
curl<\/div>\n
\n
\n

HTTP Request:<\/p>\n

POST https:\/\/.hexnodemdm.com\/api\/v1\/policy\/\r\nheaders:-\r\nAuthorization:  \r\nContent-Type: application\/json \r\nSample Post Data:- \r\n[{ \r\n\"name\": \"Sales Team Policy\", \r\n\"description\": \"\", \r\n\"windows\": { \r\n\"win_password\": { \r\n\"require_alphanumeric\": \"user_can_choose\", \r\n\"allow_simple\": true, \r\n\"max_failed_attempts\": 0, \r\n\"max_inactivity\": 5, \r\n\"max_pinage_in_days\": 0, \r\n\"min_complex_chars\": \"digits_only\", \r\n\"min_length\": 4, \r\n\"pin_history\": 0 \r\n }, \r\n\"win_wifi\": null,  \r\n\"winvpnpolicy\": null,  \r\n\"windows_defender\": null,\r\n\"app_management\": {},   \r\n\"policy_targets\": { \r\n\"devices\": [2,4], \r\n\"devicegroups\": [], \r\n\"users\": [], \r\n\"usergroups\": [] \r\n} \r\n} \r\n}] \r\n<\/pre>\n
Shell Command<\/p>\n
curl -H \"Authorization:\" -H \"Content-Type: application\/json\" -d '{\"name\":\"Sales Team Policy\",\"description\":\"\",\"windows\":{\"win_password\":{\"require_alphanumeric\":\"user_can_choose\",\"allow_simple\":true,\"max_failed_attempts\":0,\"max_inactivity\":5,\"max_pinage_in_days\":0,\"min_complex_chars\":\"digits_only\",\"min_length\":4,\"pin_history\":0}},\"policy_targets\":{\"devices\":[2,4],\"devicegroups\":[],\"users\":[],\"usergroups\":[]}\r\n}' https:\/\/.hexnodemdm.com\/api\/v1\/policy\/ -X POST \r\n<\/pre>\n<\/div>\n<\/div>\n
\n
HTTP Response:<\/p>\n
HTTP\/1.1 201 Created \r\n{ \r\n\"id\": 4, \r\n\"name\": \"Sales Team Policy\", \r\n\"description\": \"\", \r\n\"version\": 1, \r\n\"ios_configured\": false, \r\n\"android_configured\": false, \r\n\"windows_configured\": true, \r\n\"macos_configured\": false, \r\n\"created_time\": \"2023-11-09T11:27:57.037007Z\", \r\n\"modified_time\": \"2023-11-09T11:27:57.036809Z\", \r\n\"ios\": null, \r\n\"android\": null, \r\n\"windows\": { \r\n\"win_password\": { \r\n\"require_alphanumeric\": \"user_can_choose\", \r\n\"allow_simple\": true, \r\n\"max_failed_attempts\": 0, \r\n\"max_inactivity\": 5, \r\n\"max_pinage_in_days\": 0, \r\n\"min_complex_chars\": \"digits_only\", \r\n\"min_length\": 4, \r\n\"pin_history\": 0, \r\n\"force_pin\": 0 \r\n}, \r\n\"win_wifi\": null, \r\n\"winvpnpolicy\": null, \r\n\"windows_defender\": null,\r\n\"app_management\": { \r\n\"whitelist_apps\": { \r\n\"app\": [], \r\n\"group\": [] \r\n}, \r\n\"blacklist_apps\": { \r\n\"app\": [], \r\n\"group\": [] \r\n}, \r\n\"mandatory_apps\": { \r\n\"app\": [], \r\n\"group\": [] \r\n}, \r\n\"catalogues\": [] \r\n} \r\n}, \r\n\"macos\": null, \r\n\"general_settings\": { \r\n\"location_settings\": { \r\n\"tracking_disabled\": true, \r\n\"interval_minutes\": 60, \r\n\"location_configured\": false \r\n} \r\n}, \r\n\"policy_targets\": { \r\n\"devices\": [2,4], \r\n\"devicegroups\": [], \r\n\"users\": [], \r\n\"usergroups\": [] \r\n} \r\n} \r\n<\/pre>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Windows Policies The win_password dictionary can contain the following keys: Argument Type Description Default value allow_simple Boolean Optional. true require_alphanumeric String Optional. Values can be alphanumeric, numeric or user_can_choose. user_can_choose min_length Integer Optional. Values can be from 4 to 16. min_complex_chars String Optional. Values can be digits_only, digits_lower_letters or digits_lower_upper_letters. digits_only max_pinage_in_days Integer Optional. Values […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":3672,"menu_order":3,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-4774","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/pages\/4774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/comments?post=4774"}],"version-history":[{"count":23,"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/pages\/4774\/revisions"}],"predecessor-version":[{"id":5025,"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/pages\/4774\/revisions\/5025"}],"up":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/pages\/3672"}],"wp:attachment":[{"href":"https:\/\/www.hexnode.com\/mobile-device-management\/developers\/wp-json\/wp\/v2\/media?parent=4774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}