> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/apply-policies-gpos.md).

# Apply policies (GPOs)

Enforce Remote Desktop Manager settings with Group Policy Objects on Windows or MDM configuration profiles on macOS to harden security.

Administrative templates facilitate the management of registry-based policy settings, which can be applied on the computer and/or user configuration. A Group Policy Object (GPO) is a tool that enables your organization to enforce global settings on all computers, and at the same time, harden Remote Desktop Manager security.

{% tabs %}
{% tab title="Windows" %}
{% hint style="info" %}
Administrative templates are registry settings that are enforced by domains. They contain registry keys that can also be set on computers that are not joined to domains. In this case, however, proper Access Control Lists (ACLs) must be put in place to prevent users from modifying registry settings. Refer to the tables below to find the registry key for each policy setting.
{% endhint %}

To learn more on how to deploy the Remote Desktop Manager administrative templates on your domain, please refer to the Microsoft documentation.

## List Remote Desktop Manager GPOs in the Local group policy editor

{% hint style="info" %}
Policies that take a value other than enabled or disabled, such as a number of minutes or one of the listed options (for example, **Force lock on idle**), display an input field in the policy settings window. Enter one of the values listed for that policy below.
{% endhint %}

Remote Desktop Manager includes an administrative template file (.admx), which describes the policies that are offered. You will find it in the policies subfolder. Before you can manage GPOs in Remote Desktop Manager, you first need to list them in the Local Group Policy Editor. Here are the steps:

1. Go to your policies subfolder. By default, the path is `C:\Program Files\Devolutions\Remote Desktop Manager\Policies`.
2. Copy the Devolutions.admx file.
3. Go to `C:\Windows\PolicyDefinitions`.
4. Paste the Devolutions.admx file in the root of `C:\Windows\PolicyDefinitions`.
5. Go to `C:\Program Files\Devolutions\Remote Desktop Manager\Policies\en-US`.
6. Copy the `Devolutions.adml` file.
7. Paste the Devolutions.adml file in `C:\Windows\PolicyDefinitions\en-US`.
8. Open your Group Policy Editor and go to ***Computer Configuration*** – ***Administrative Templates*** – ***Devolutions*** – ***Remote Desktop Manager***, or to the same path under ***User Configuration***.
9. Browse the different folders for the desired policies.
10. Right-click the specific policy, edit it accordingly, and save.

If Remote Desktop Manager is open when you make this change, then you will need to restart it for the new policy to take effect.

## General

### Clear clipboard delay

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ClearClipboardDelay`

* 0 = Not configured (the user option applies)
* 10-300 = Force clearing the clipboard after the specified number of seconds

***

### Clipboard copy method

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ClipboardCopyMethod`

* 0 = Disabled (no changes)
* 1 = Legacy
* 2 = Paste once (secure)

***

### CyberArk Keep authenticated sessions alive

Keep CyberArk authenticated sessions alive.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\CyberArkKeepAuthenticatedSessionsAlive`

* 0 = Not configured
* 1 = Enabled
* 2 = Disabled

***

### CyberArk Terminate idle cloud sessions

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\CyberArkEnforceIdleSession`

* 0 = Not configured
* 1 = Enabled
* 2 = Disabled

***

### Disable assistant related features

Disable AI assistant features.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAssistantRelatedFeatures`

***

### Disable feedback prompts

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFeedbackPrompts`

***

### Disable launch at startup

Disable the launching of entries at startup.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableLaunchAtStartup`

***

### Disable license expiration message

Disable the license expiration message in the Overview.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableLicenseExpirationMessage`

***

### Disable mouse jiggler

Disable the mouse jiggler option.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMouseJiggler`

***

### Disable network scan

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableNetworkScan`

***

### Disable telemetry

Disable the telemetry data collection.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAnalytics`

***

### Disable update

Disable the application's update menus.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableUpdate`

***

### Enforce auto-update frequency

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnforceAutoUpdateFrequency`

* 0 = Not configured
* 1 = Once a month
* 2 = Once a week
* 3 = Once a day
* 4 = Manual checks only

***

### Enforce auto-update release channel

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnforceAutoUpdateReleaseChannel`

* 0 = Not configured
* 1 = Current
* 2 = Beta
* 3 = Extended maintenance

***

### Force clear cache on close (MSEdge)

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceClearCacheOnCloseMSEdge`

***

### Force current configuration loading

Force the loading of the current configuration file.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceCurrentConfigurationLoading`

***

### Force default configuration loading

Force the loading of the default.cfg file.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceDefaultConfigurationLoading`

***

### Force system proxy

Force proxy settings to System.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceSystemProxy`

***

### Force user specific settings migration

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceUserSpecificSettingsMigration`

***

### Hide browse host button

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideBrowseHostButton`

***

### Hide Devolutions Send tool

Hide the Devolutions Send tool in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableDevolutionsSendTool`

***

### Hide what's new page

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideWhatsNewPage`

***

### No internet connection

Disable features requiring an internet connection, such as telemetry, automatic favicon fetching, and checking for add-on updates.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\NoInternetConnection`

***

### Quick connect confirmation prompt handling

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\QuickConnectConfirmationPromptHandling`

* 0 = Not configured
* 1 = Always close the connection

***

### Restrict to Devolutions Cloud workspace

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\RestrictToHubBusinessDataSource`

{% hint style="info" %}
The workspace restriction policies can be used simultaneously. This will allow users to create workspaces that match the types of activated policies.
{% endhint %}

***

### Restrict to Devolutions Server workspace

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\RestrictToDVLSDataSource`

{% hint style="info" %}
The workspace restriction policies can be used simultaneously. This will allow users to create workspaces that match the types of activated policies.
{% endhint %}

***

### Show Folder Details as Selected

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ShowFolderDetailsAsSelected`

* 0 = Disabled (no changes)
* 1 = Enforce the Show folder details as selected setting
* 2 = Disable the Show folder details as selected setting

***

### SQLite default location

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\SQLiteDefaultLocation`

The folder path.

***

## Security

### Allow Desktop Extension installation

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\AllowDesktopExtensionInstall`

* 0 = Not configured
* 1 = Allowed
* 2 = Not allowed

***

### Allow sync all vaults (background)

Allow sync all vaults in background.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\AllowSyncAllVaultsBackground`

* 0 = Not configured
* 1 = Allowed
* 2 = Not allowed

***

### Always prompt for passphrase

Force the user to always be prompted for their passphrase while connecting to a workspace that is protected by a Shared Passphrase Security Provider.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\AlwaysPromptForPassphrase`

***

### Application 2FA mode

Force an application multifactor authentication mode (check against all configured methods or prompt for selection on use).

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\Application2FAMode`

* 0 = Disabled
* 1 = Check against all configured methods
* 2 = Prompt for selection on use

***

### Apply forced password template in password generator tool

Apply the forced password template in the Password Generator tool.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ApplyForcedPasswordTemplateInPasswordGeneratorTool`

***

### Check for server certificate revocation

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\CheckForServerCertificateRevocation`

* 0 = Disabled (no changes)
* 1 = Enable check for certificates
* 2 = Disable check for certificates

***

### Credential prompt domain field

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\CredentialPromptDomainField`

* 0 = Not configured (the user option applies)
* 1 = After username
* 2 = After password
* 3 = Hidden

***

### (Deprecated) Force disable all session events

Disable all session events. This policy is deprecated: use the **Session events execution** policy instead.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceDisableAllSessionEvents`

***

### Disable caching

Disable the Caching mode.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCaching`

***

### Disable CyberArk password retrieval

Disable retrieval of passwords from CyberArk accounts.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCyberArkPasswordRetrieval`

***

### Disable mask password in view password

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMaskPasswordInViewPassword`

***

### Disable MCP server

Disable the MCP server feature.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMCPServer`

***

### Disable my account settings

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMyAccountSettings`

***

### Disable my personal credentials

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMyPersonalCredentials`

***

### Disable my privileged account

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMyPrivilegedAccount`

***

### Disable my SSH private key

Disable My Personal SSH Key.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMyPersonalPrivateKey`

***

### Disable offline

Disable the Offline Mode.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOffline`

***

### Disable password generator

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordGenerator`

***

### Disable password history

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordHistory`

***

### Disable password saving in Tools

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordSavingInTools`

***

### Disable password saving in user specific settings

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordSavingInUserSpecificSettings`

***

### Disable password saving in vaults

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordSavingInVaults`

***

### Disable quick connect

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableQuickConnect`

***

### Disable RDP hard drives specific settings

Disable the hard drive override in the specific settings of RDP entries.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRDPHardDrivesSpecificSettings`

***

### Disable read/write offline

Disable read/write in Offline Mode.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableReadWriteOffline`

***

### Disable system vault in user vault

Disable the system Contacts, Macros and VPNs in the user vault.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableGlobalVaultInUserVault`

***

### Disable user vault export

Disable exporting the user vault.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableUserVaultExport`

***

### Disable website credential auto-fill after delay

Disable website and web browser credential autofill after one minute.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableWebsiteCredentialAutoFillAfterDelay`

***

### Force application MFA

Force multifactor authentication on the application login.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceApplicationMFA`

***

### Force application password

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLocalApplicationPassword`

***

### Force close on idle

Force application close when idle.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceCloseOnIdle`

The number of minutes.

***

### Force Devolutions Send region

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceDevolutionsSendRegion`

* 0 = Not configured
* 1 = Canada (.com)
* 2 = France (.eu)

***

### Force enable DPAPI cryptography on local files

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceEnableDPAPICryptographyOnLocalFiles`

***

### Force Enhanced security for Offline mode

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceOfflineModeEnhancedSecurity`

***

### Force hide password for administrators

Remove the possibility to see passwords entirely.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceHidePasswordForAdministrators`

***

### Force local my account settings

Force the local save of My Account Settings.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLocalMyAccountSettings`

***

### Force lock on idle

Force application lock when idle.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLockOnIdle`

The number of minutes.

***

### Force lock on minimize

Force application lock when minimizing.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLockOnMinimize`

***

### Force lock on standby

Force application lock on standby.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLockOnStandby`

***

### Force lock on Windows lock

Force application lock when Windows locks.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLockOnWindowsLock`

***

### Force login

Force the user to always be prompted for their credentials when launching the application.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLogin`

***

### Force secure desktop

Force secure desktop usage.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceSecureDesktop`

***

### Force Windows credentials and currently logged on username and domain

Use Windows credentials as the application password and force the currently logged on username and domain (unless an application password is already set).

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceWindowsCredentialsAndCurrentlyLoggedOnUsernameAndDomain`

***

### Force Windows Hello

Force Windows Hello authentication on the application login.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceWindowsHello`

***

### Hide port in RDP

Hide the custom port in RDP sessions.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HidePortInRDP`

***

### Ignore application certificate errors

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\IgnoreApplicationCertificateErrors`

***

### LastPass 2FA mode

Set the LastPass multifactor authentication mode.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\LastPass2FAMode`

* 0 = Disabled (no changes)
* 1 = Do not trust this device
* 2 = Trust this device
* 3 = Trust this device (clear on application close)

***

### Protect data from screen capture

Prevent acquiring data from most Remote Desktop Manager windows, including sensitive areas, with screen captures.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ProtectDataFromScreenCapture`

* 0 = Disabled (no changes)
* 1 = Enable the screen capture protection
* 2 = Disable the screen capture protection

***

### Session events execution

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\SessionEventsExecution`

* 0 = Not configured
* 1 = Enabled
* 2 = Warn on risky events
* 3 = Disable risky events
* 4 = Disable all events
* 5 = Optional per vault

***

## Sessions

### Confirm sessions open on count greater than

Prompt for confirmation before opening multiple sessions when the number of sessions to open is greater than the specified number.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ConfirmSessionsOpenOnCountGreaterThan`

***

### Default PowerShell version

Select the default PowerShell version.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DefaultPowerShellVersion`

* 0 = Disabled (no changes)
* 1 = Default
* 2 = Windows PowerShell (2.0)
* 3 = Windows PowerShell (5.1)
* 4 = PowerShell 7

***

### Disable add-on (deprecated)

Disable the Add-on creation and the Add-on Manager. This policy is deprecated: use the **Disable add-on entries** and **Disable add-on manager** policies instead.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOn`

***

### Disable add-on entries

Disable the Add-on creation of entries.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOnEntries`

***

### Disable add-on manager

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOnManager`

***

### Disable custom image

Disable the custom image edition in the session configuration.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCustomImage`

***

### Disable custom server roles

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCustomServerRoles`

***

### Disable execute scripts via terminal

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableExecuteScriptsViaTerminal`

***

### Disable export vault menus

Disable export vault menus in export menus.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableExportVaultMenus`

***

### Disable import in user vault

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableImportInPrivateVault`

***

### Disable Kerberos certificate logon for smart cards

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableSmartCardKerbCertificateLogon`

Stop requesting a Kerberos certificate logon for smart card certificate + PIN RDP sessions. It is requested by default; enable this policy to fall back to the standard Windows credential path.

***

### Disable local drive sharing

Disable local drive sharing of RDP entries.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableLocalDriveSharing`

***

### Disable RDP gateway edition in entry

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRDPGatewayEditionInEntry`

Prevent non-admin users from editing the gateway section in RDP entries.

***

### Disable reveal password

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRevealPassword`

***

### Disable session recording

Disable the session recording feature.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableSessionRecording`

***

### Enable connection after expiration

Allow the user to connect even after the entry has expired.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnableConnectionAfterExpiration`

***

### Enable PowerShell remote console hooking

Enable PowerShell Remote Console API hooking.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnablePowerShellRemoteConsoleHooking`

***

### Enable RDP hooking

Enable RDP API hooking.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnableRDPHooking`

***

### Force refresh before copy from entry

Force refresh before copy password/username/domain.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceRefreshBeforeCopyFromEntry`

***

### Force refresh before edit entry

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceRefreshBeforeEditEntry`

***

### Force refresh before execute entry

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceRefreshBeforeExecuteEntry`

***

### Force refresh before view password

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceRefreshBeforeViewPassword`

***

### Limit entries launched in a single action

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\LimitEntriesLaunchedInASingleAction`

Value = Session count must be equal or smaller than this number.

***

### Non-modal edit

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\NonModalEdit`

* 0 = Disabled
* 1 = Enabled (force-enabled for all users)
* 2 = Allowed (user must enable the option — default)

***

### Only allow credentials in user vault

Restrict the user vault to credential entries and folders. Other entry types cannot be added, importing and pasting into the user vault are disabled, and existing non-credential entries are hidden from it.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\OnlyAllowCredentialsInPrivateVault`

***

### RDP logoff when disconnecting

Control whether RDP sessions automatically log off the current user when disconnecting.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\RDPLogOffWhenDisconnecting`

* 0 = Disabled (no changes)
* 1 = Enforce logging off the user when disconnecting
* 2 = Prevent logging off the user when disconnecting

***

## User interface

### Dashboard Auto Focus Item on Tab Select

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardAutoFocusItemOnTabSelect`

* 0 = Disabled (no changes)
* 1 = Disable auto-focus
* 2 = Enable auto-focus

***

### Dashboard Auto Focus Tab on Item Select

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardAutoFocusTabOnItemSelect`

* 0 = Disabled (no changes)
* 1 = Disable auto-focus
* 2 = Enable auto-focus

***

### Dashboard hide all asset panels

Hide the Asset panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllAssetPanels`

***

### Dashboard hide all attachments panels

Hide the Attachments panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllAttachmentsPanels`

***

### Dashboard hide all automation panels

Hide the Automation panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllAutomationPanels`

***

### Dashboard hide all documentation panels

Hide the Documentation panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllDocumentationPanels`

***

### Dashboard hide all entries panels

Hide the Entries panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllEntriesPanels`

***

### Dashboard hide all log panels

Hide the Logs panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllLogsPanels`

***

### Dashboard hide all management tools panels

Hide the Remote management panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllManagementToolsPanels`

***

### Dashboard hide all overview panels

Hide the Overview panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllOverviewPanels`

***

### Dashboard hide all password list panels

Hide the Password List panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllPasswordListPanels`

***

### Dashboard hide all permissions panels

Hide the Permissions panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllPermissionsPanels`

***

### Dashboard hide all recordings panels

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllRecordingsPanels`

***

### Dashboard hide all referenced by panels

Hide the Referenced By panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllReferencedByPanels`

***

### Dashboard hide all sub entries panels

Hide the Subentries panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllSubConnectionsPanels`

***

### Dashboard hide all summary panels

Hide the Summary panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllSummaryPanels`

***

### Dashboard hide all task panels

Hide the Tasks panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllTaskPanels`

***

### Dashboard hide all tools panels

Hide the Tools panel located in the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DashboardHideAllMacroScriptToolsPanels`

***

### Default navigation pane tab

Select the default tab for the navigation pane on launch.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DefaultNavigationPaneTab`

* 0 = Disabled (no changes)
* 1 = Main vault
* 2 = Opened sessions
* 3 = Favorites
* 4 = Recent
* 5 = Tools (local)
* 6 = User vault
* 7 = Last selected tab
* 8 = PAM vault
* 9 = My account

***

### Disable about

Disable the About menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAbout`

***

### Disable application tools

Disable all the local application tools like the Event Viewer or IIS.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableApplicationTools`

***

### Disable auto-focus dashboard

Disable the auto-focus of the Dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAutoFocusDashboard`

***

### Disable drag and drop

Disable drag and drop in the connection list.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableDragAndDrop`

***

### Disable file options

Disable the File – Settings menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFileOptions`

***

### Disable file transfer for SSH

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFileTransferForSSH`

***

### Disable file workspaces

Disable the File – Workspaces menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFileDataSources`

***

### Disable help

Disable the Help menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableHelp`

***

### Disable import/export options

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableImportExportOptions`

***

### Disable in-app upselling

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableInAppUpselling`

***

### Disable onboarding

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOnboarding`

***

### Disable online account

Disable the Devolutions Account usage. The Devolutions Account menus and the Devolutions Account section of My account are hidden, and Devolutions Cloud workspaces cannot be added.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOnlineAccount`

***

### Disable open with parameters

Disable the option to open with parameters.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOpenWithParameters`

***

### Disable quick start

Disable the Quick Start tab.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableQuickStart`

***

### Disable reveal password in my account settings

Disable the Reveal Password option in My Account Settings for all users, including administrators.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRevealPasswordInMyAccountSettings`

***

### Disable send error report dialog

Disable the Error Report prompt.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableSendErrorReportDialog`

***

### Disable send message in dashboard

Disable the send message feature in the dashboard.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableSendMessageInDashboard`

***

### Disable tools add-on manager

Disable the Add-on Manager in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsAddOnManager`

***

### Disable tools Chocolatey console

Disable the Chocolatey Console in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsChocolateyConsole`

***

### Disable tools extension manager

Disable the Extension Manager in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsExtensionManager`

***

### Disable tools local RDP RemoteApp manager

Disable the Local RDP/RemoteApp Manager in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsLocalRDPRemoteAppManager`

***

### Disable tools menu

Disable the Tools Ribbon tab and menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsMenu`

***

### Disable tools open new Remote Desktop

Disable the Open New Remote Desktop option in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsOpenNewRemoteDesktop`

***

### Disable tools Powershell RDM cmdlet

Disable the PowerShell Remote Desktop Manager Cmdlet in the Tools menu.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsPowershellRDMCmdlet`

***

### Disable tools Winget console

Disable the UniGetUI tool in the Tools menu. UniGetUI replaces the Winget console.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsWingetConsole`

***

### Disable top pane

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableTopPane`

***

### Force tree view collapse at launch

Force the main tree view to load with all nodes collapsed at launch.

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceTreeViewCollapseAtLaunch`

***

### Hide Copy YubiKey

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideCopyYubiKey`

Hide the Copy to YubiKey button.

***

### Hide dashboard

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideDashboard`

***

### Hide Devolutions contact support features

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideDevolutionsContactSupportFeatures`

***

### Hide navigation pane

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\HideNavigationPane`

***

### Lock navigation pane

`%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\LockNavigationPane`

***

## Notes

For each GPO’s corresponding Registry Key, the **%Root%** can either be **HKEY\_LOCAL\_MACHINE** or **HKEY\_CURRENT\_USER**, depending on how you want to enforce the policy. When a policy is set under both, the **HKEY\_LOCAL\_MACHINE** value takes precedence. Please refer to [Microsoft's online documentation](https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/windows-registry-advanced-users) to make the best choice for your organization's requirements.
{% endtab %}

{% tab title="macOS" %}
On macOS, the equivalent policies are deployed as configuration profiles through a mobile device management (MDM) solution. Remote Desktop Manager reads its policies from the `com.devolutions.remotedesktopmanager` preference domain. Deploy them as a configuration profile through your MDM solution so users cannot change them. The policy keys are the same as the Windows registry value names.

## Deploy policies with a configuration profile

1. In your MDM solution, create a configuration profile that contains a custom settings (managed preferences) payload.
2. Set the preference domain to `com.devolutions.remotedesktopmanager`.
3. Add a key for each policy to enforce, using the key names and value types listed in the tables below.
4. Deploy the configuration profile to the target computers.

Here is an example of the payload content:

```xml
<dict>
    <key>DisableToolsMenu</key>
    <true/>
    <key>ForceLockOnIdle</key>
    <integer>15</integer>
    <key>RestrictToDVLSDataSource</key>
    <true/>
</dict>
```

Boolean policies are enabled with `<true/>`. Integer policies take one of the numerical values listed in the tables below. Leave a key out of the payload to keep the default behavior.

{% hint style="info" %}
Remote Desktop Manager detects policy changes while it runs and checks for them at most once per minute. If a change does not take effect, restart Remote Desktop Manager.
{% endhint %}

To test a policy on a single computer before deploying it, run a command such as `defaults write com.devolutions.remotedesktopmanager DisableToolsMenu -bool true` in the Terminal. Policies set this way are not enforced, since the user can change them.

## General

<table><thead><tr><th width="300">POLICY</th><th>KEY</th><th>VALUE</th></tr></thead><tbody><tr><td><strong>Clipboard copy method</strong></td><td><code>ClipboardCopyMethod</code></td><td><p>Integer</p><ul><li>0 = Disabled (no changes)</li><li>1 = Legacy</li><li>2 = Paste once (secure)</li></ul></td></tr><tr><td><strong>Disable launch at startup</strong></td><td><code>DisableLaunchAtStartup</code></td><td>Boolean</td></tr><tr><td><strong>Disable network scan</strong></td><td><code>DisableNetworkScan</code></td><td>Boolean</td></tr><tr><td><strong>Disable update</strong></td><td><code>DisableUpdate</code></td><td>Boolean</td></tr><tr><td><strong>Enforce auto-update release channel</strong></td><td><code>EnforceAutoUpdateReleaseChannel</code></td><td><p>Integer</p><ul><li>0 = Not configured</li><li>1 = Current</li><li>2 = Beta</li><li>3 = Extended maintenance</li></ul></td></tr><tr><td><strong>Hide browse host button</strong></td><td><code>HideBrowseHostButton</code></td><td>Boolean</td></tr><tr><td><strong>Hide Devolutions Send tool</strong></td><td><code>DisableDevolutionsSendTool</code></td><td>Boolean</td></tr><tr><td><strong>Hide what's new page</strong></td><td><code>HideWhatsNewPage</code></td><td>Boolean</td></tr><tr><td><strong>No internet connection</strong></td><td><code>NoInternetConnection</code></td><td>Boolean</td></tr><tr><td><strong>Quick connect confirmation prompt handling</strong></td><td><code>QuickConnectConfirmationPromptHandling</code></td><td><p>Integer</p><ul><li>0 = Not configured</li><li>1 = Always close the connection</li></ul></td></tr><tr><td><strong>Restrict to Devolutions Cloud workspace</strong></td><td><code>RestrictToHubBusinessDataSource</code></td><td>Boolean<br><br>The workspace restriction policies can be used simultaneously to allow every workspace type whose policy is enabled.</td></tr><tr><td><strong>Restrict to Devolutions Server workspace</strong></td><td><code>RestrictToDVLSDataSource</code></td><td>Boolean<br><br>The workspace restriction policies can be used simultaneously to allow every workspace type whose policy is enabled.</td></tr></tbody></table>

## Security

<table><thead><tr><th width="300">POLICY</th><th>KEY</th><th>VALUE</th></tr></thead><tbody><tr><td><strong>Allow sync all vaults (background)</strong></td><td><code>AllowSyncAllVaultsBackground</code></td><td><p>Integer</p><ul><li>0 = Not configured</li><li>1 = Allowed</li><li>2 = Not allowed</li></ul></td></tr><tr><td><strong>Always prompt for passphrase</strong></td><td><code>AlwaysPromptForPassphrase</code></td><td>Boolean</td></tr><tr><td><strong>Check for server certificate revocation</strong></td><td><code>CheckForServerCertificateRevocation</code></td><td><p>Integer</p><ul><li>0 = Disabled (no changes)</li><li>1 = Enable check for certificates</li><li>2 = Disable check for certificates</li></ul></td></tr><tr><td><strong>(Deprecated) Force disable all session events</strong></td><td><code>ForceDisableAllSessionEvents</code></td><td>Boolean</td></tr><tr><td><strong>Disable my account settings</strong></td><td><code>DisableMyAccountSettings</code></td><td>Boolean</td></tr><tr><td><strong>Disable my personal credentials</strong></td><td><code>DisableMyPersonalCredentials</code></td><td>Boolean</td></tr><tr><td><strong>Disable my privileged account</strong></td><td><code>DisableMyPrivilegedAccount</code></td><td>Boolean</td></tr><tr><td><strong>Disable my SSH private key</strong></td><td><code>DisableMyPersonalPrivateKey</code></td><td>Boolean</td></tr><tr><td><strong>Disable offline</strong></td><td><code>DisableOffline</code></td><td>Boolean</td></tr><tr><td><strong>Disable password generator</strong></td><td><code>DisablePasswordGenerator</code></td><td>Boolean</td></tr><tr><td><strong>Disable password history</strong></td><td><code>DisablePasswordHistory</code></td><td>Boolean</td></tr><tr><td><strong>Disable quick connect</strong></td><td><code>DisableQuickConnect</code></td><td>Boolean</td></tr><tr><td><strong>Disable user vault export</strong></td><td><code>DisableUserVaultExport</code></td><td>Boolean</td></tr><tr><td><strong>Force application password</strong></td><td><code>ForceLocalApplicationPassword</code></td><td>Boolean</td></tr><tr><td><strong>Force close on idle</strong></td><td><code>ForceCloseOnIdle</code></td><td>Integer<br><br>The number of minutes.</td></tr><tr><td><strong>Force local my account settings</strong></td><td><code>ForceLocalMyAccountSettings</code></td><td>Boolean</td></tr><tr><td><strong>Force lock on idle</strong></td><td><code>ForceLockOnIdle</code></td><td>Integer<br><br>The number of minutes.</td></tr><tr><td><strong>Force lock on minimize</strong></td><td><code>ForceLockOnMinimize</code></td><td>Boolean</td></tr><tr><td><strong>Force lock on standby</strong></td><td><code>ForceLockOnStandby</code></td><td>Boolean</td></tr><tr><td><strong>Force login</strong></td><td><code>ForceLogin</code></td><td>Boolean</td></tr><tr><td><strong>Ignore application certificate errors</strong></td><td><code>IgnoreApplicationCertificateErrors</code></td><td>Boolean</td></tr><tr><td><strong>Session events execution</strong></td><td><code>SessionEventsExecution</code></td><td><p>Integer</p><ul><li>0 = Not configured</li><li>1 = Enabled</li><li>2 = Warn on risky events</li><li>3 = Disable risky events</li><li>4 = Disable all events</li><li>5 = Optional per vault</li></ul></td></tr></tbody></table>

## Sessions

<table><thead><tr><th width="300">POLICY</th><th>KEY</th><th>VALUE</th></tr></thead><tbody><tr><td><strong>Disable add-on (deprecated)</strong></td><td><code>DisableAddOn</code></td><td>Boolean<br><br>Use <code>DisableAddOnEntries</code> and <code>DisableAddOnManager</code> instead.</td></tr><tr><td><strong>Disable add-on entries</strong></td><td><code>DisableAddOnEntries</code></td><td>Boolean</td></tr><tr><td><strong>Disable add-on manager</strong></td><td><code>DisableAddOnManager</code></td><td>Boolean</td></tr><tr><td><strong>Disable custom image</strong></td><td><code>DisableCustomImage</code></td><td>Boolean</td></tr><tr><td><strong>Disable execute scripts via terminal</strong></td><td><code>DisableExecuteScriptsViaTerminal</code></td><td>Boolean</td></tr><tr><td><strong>Disable export vault menus</strong></td><td><code>DisableExportVaultMenus</code></td><td>Boolean</td></tr><tr><td><strong>Disable import in user vault</strong></td><td><code>DisableImportInPrivateVault</code></td><td>Boolean</td></tr><tr><td><strong>Enable connection after expiration</strong></td><td><code>EnableConnectionAfterExpiration</code></td><td>Boolean</td></tr><tr><td><strong>Force refresh before copy from entry</strong></td><td><code>ForceRefreshBeforeCopyFromEntry</code></td><td>Boolean</td></tr><tr><td><strong>Force refresh before edit entry</strong></td><td><code>ForceRefreshBeforeEditEntry</code></td><td>Boolean</td></tr><tr><td><strong>Force refresh before execute entry</strong></td><td><code>ForceRefreshBeforeExecuteEntry</code></td><td>Boolean</td></tr><tr><td><strong>Force refresh before view password</strong></td><td><code>ForceRefreshBeforeViewPassword</code></td><td>Boolean</td></tr><tr><td><strong>Only allow credentials in user vault</strong></td><td><code>OnlyAllowCredentialsInPrivateVault</code></td><td>Boolean</td></tr></tbody></table>

## User interface

<table><thead><tr><th width="300">POLICY</th><th>KEY</th><th>VALUE</th></tr></thead><tbody><tr><td><strong>Dashboard hide all asset panels</strong></td><td><code>DashboardHideAllAssetPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all attachments panels</strong></td><td><code>DashboardHideAllAttachmentsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all automation panels</strong></td><td><code>DashboardHideAllAutomationPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all documentation panels</strong></td><td><code>DashboardHideAllDocumentationPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all entries panels</strong></td><td><code>DashboardHideAllEntriesPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all log panels</strong></td><td><code>DashboardHideAllLogsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all management tools panels</strong></td><td><code>DashboardHideAllManagementToolsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all overview panels</strong></td><td><code>DashboardHideAllOverviewPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all password list panels</strong></td><td><code>DashboardHideAllPasswordListPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all permissions panels</strong></td><td><code>DashboardHideAllPermissionsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all recordings panels</strong></td><td><code>DashboardHideAllRecordingsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all referenced by panels</strong></td><td><code>DashboardHideAllReferencedByPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all sub entries panels</strong></td><td><code>DashboardHideAllSubConnectionsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all summary panels</strong></td><td><code>DashboardHideAllSummaryPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all task panels</strong></td><td><code>DashboardHideAllTaskPanels</code></td><td>Boolean</td></tr><tr><td><strong>Dashboard hide all tools panels</strong></td><td><code>DashboardHideAllMacroScriptToolsPanels</code></td><td>Boolean</td></tr><tr><td><strong>Default navigation pane tab</strong></td><td><code>DefaultNavigationPaneTab</code></td><td><p>Integer</p><ul><li>0 = Disabled (no changes)</li><li>1 = Main vault</li><li>2 = Opened sessions</li><li>3 = Favorites</li><li>4 = Recent</li><li>5 = Tools (local)</li><li>6 = User vault</li><li>7 = Last selected tab</li><li>8 = PAM vault</li><li>9 = My account</li></ul></td></tr><tr><td><strong>Disable about</strong></td><td><code>DisableAbout</code></td><td>Boolean</td></tr><tr><td><strong>Disable application tools</strong></td><td><code>DisableApplicationTools</code></td><td>Boolean</td></tr><tr><td><strong>Disable auto-focus dashboard</strong></td><td><code>DisableAutoFocusDashboard</code></td><td>Boolean</td></tr><tr><td><strong>Disable drag and drop</strong></td><td><code>DisableDragAndDrop</code></td><td>Boolean</td></tr><tr><td><strong>Disable file options</strong></td><td><code>DisableFileOptions</code></td><td>Boolean</td></tr><tr><td><strong>Disable file transfer for SSH</strong></td><td><code>DisableFileTransferForSSH</code></td><td>Boolean</td></tr><tr><td><strong>Disable file workspaces</strong></td><td><code>DisableFileDataSources</code></td><td>Boolean<br><br>Hides SQLite and XML workspaces and prevents adding them.</td></tr><tr><td><strong>Disable help</strong></td><td><code>DisableHelp</code></td><td>Boolean</td></tr><tr><td><strong>Disable import/export options</strong></td><td><code>DisableImportExportOptions</code></td><td>Boolean</td></tr><tr><td><strong>Disable in-app upselling</strong></td><td><code>DisableInAppUpselling</code></td><td>Boolean</td></tr><tr><td><strong>Disable online account</strong></td><td><code>DisableOnlineAccount</code></td><td>Boolean</td></tr><tr><td><strong>Disable open with parameters</strong></td><td><code>DisableOpenWithParameters</code></td><td>Boolean</td></tr><tr><td><strong>Disable quick start</strong></td><td><code>DisableQuickStart</code></td><td>Boolean</td></tr><tr><td><strong>Disable send error report dialog</strong></td><td><code>DisableSendErrorReportDialog</code></td><td>Boolean</td></tr><tr><td><strong>Disable send message in dashboard</strong></td><td><code>DisableSendMessageInDashboard</code></td><td>Boolean</td></tr><tr><td><strong>Disable tools add-on manager</strong></td><td><code>DisableToolsAddOnManager</code></td><td>Boolean</td></tr><tr><td><strong>Disable tools extension manager</strong></td><td><code>DisableToolsExtensionManager</code></td><td>Boolean</td></tr><tr><td><strong>Disable tools menu</strong></td><td><code>DisableToolsMenu</code></td><td>Boolean</td></tr><tr><td><strong>Force tree view collapse at launch</strong></td><td><code>ForceTreeViewCollapseAtLaunch</code></td><td>Boolean</td></tr><tr><td><strong>Hide dashboard</strong></td><td><code>HideDashboard</code></td><td>Boolean</td></tr><tr><td><strong>Hide Devolutions contact support features</strong></td><td><code>HideDevolutionsContactSupportFeatures</code></td><td>Boolean</td></tr><tr><td><strong>Hide navigation pane</strong></td><td><code>HideNavigationPane</code></td><td>Boolean</td></tr><tr><td><strong>Lock navigation pane</strong></td><td><code>LockNavigationPane</code></td><td>Boolean</td></tr></tbody></table>
{% endtab %}
{% endtabs %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/apply-policies-gpos.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.