User management of sharing user name, account picture, and domain information with apps (not desktop apps)
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
System > User Profiles
Supported on
At least Windows Server 2012, Windows 8 or Windows RT

Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

This setting prevents users from managing the ability to allow apps to access the user name, account picture, and domain information. If you enable this policy setting, sharing of user name, picture and domain information may be controlled by setting one of the following options: "Always on" - users will not be able to change this setting and the user's name and account picture will be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will also be able to retrieve the user's UPN, SIP/URI, and DNS. "Always off" - users will not be able to change this setting and the user's name and account picture will not be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will not be able to retrieve the user's UPN, SIP/URI, and DNS. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources. If you do not configure or disable this policy the user will have full control over this setting and can turn it off and on. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources if users choose to turn the setting off.

Internal name
UserInfoAccessAction
Policy ID
5ff5d2c93358
Elements
1

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ScopeElementTypeRegistry mappingConstraints & behaviorCopy
Computer
Action:
ID AllowUserInfoAccess
enum
Path
Software\Policies\Microsoft\Windows\System
Value name
AllowUserInfoAccess
Type
REG_DWORD
Options: Always on (1), Always off (2)
Action:
Computer · Type enum
Registry mapping
Path
Software\Policies\Microsoft\Windows\System
Value name
AllowUserInfoAccess
Type
REG_DWORD
Details
Options: Always on (1), Always off (2)