I'm testing the August Windows 11 update on our Windows 11 Enterprise machines and noticed that under Privacy & Security: Documents, Downloads folder, Music library, Pictures, Videos and File system are no longer off and greyed out. We had been using the following registry entries in our group policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\downloadsFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\musicLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess
We set all of the Values to Deny
After the August update, the registry entries above still appear on the machines and are set to Deny but I can go into each of these and the toggle is on and a user can turn the setting off or on.
Has anyone else run into this? Any ideas on how to turn them off again?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\downloadsFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\musicLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess
We set all of the Values to Deny
After the August update, the registry entries above still appear on the machines and are set to Deny but I can go into each of these and the toggle is on and a user can turn the setting off or on.
Has anyone else run into this? Any ideas on how to turn them off again?
- Windows Build/Version
- Windows 11 Enterprise Edition (Build 26100) (64 Bit)
My Computer
At a glance
Windows 11 Enterprise 2H42
- OS
- Windows 11 Enterprise 2H42
- Manufacturer/Model
- Dell




