Updated ADMX for WSLC (#40422)
* Updated ADMX for WSLC * Updates from comments * Updated changes * Removed query file
Craig Loewen committed
May 7, 2026 at 15:49 UTC
193f0ae4dfd4cd91298139bd25ead29e9c9f9edd
2 files changed
+36
-1
intune/WSL.admx
+24
@@ -7,6 +7,9 @@
7
<resources minRequiredRevision="0.1" fallbackCulture="en-US"/>
8
<categories>
9
<category name="WSL" displayName="$(string.WindowsSubsystemForLinux)"/>
10
+ <category name="WSLContainer" displayName="$(string.WSLContainer)">
11
+ <parentCategory ref="WSL" />
12
+ </category>
13
</categories>
14
<policies>
15
<policy name="AllowWSL" class="Machine" displayName="$(string.AllowWSL)" explainText="$(string.AllowWSLExplain)" key="Software\Policies\WSL" valueName="AllowWSL">
@@ -171,5 +174,26 @@
174
</elements>
175
</policy>
176
177
+ <!-- WSL Container Policies -->
178
+
179
+ <policy name="AllowWSLContainer" class="Machine" displayName="$(string.AllowWSLContainer)" explainText="$(string.AllowWSLContainerExplain)" key="Software\Policies\WSL" valueName="AllowWSLContainer">
180
+ <parentCategory ref="WSLContainer" />
181
+ <supportedOn ref="windows:SUPPORTED_Windows10" />
182
+ <enabledValue>
183
+ <decimal value="1" />
184
+ </enabledValue>
185
+ <disabledValue>
186
+ <decimal value="0" />
187
+ </disabledValue>
188
+ </policy>
189
+
190
+ <policy name="WSLContainerCLIRegistryAllowlist" class="Machine" displayName="$(string.WSLContainerCLIRegistryAllowlist)" explainText="$(string.WSLContainerCLIRegistryAllowlistExplain)" presentation="$(presentation.WSLContainerCLIRegistryAllowlist)" key="Software\Policies\WSL">
191
+ <parentCategory ref="WSLContainer" />
192
+ <supportedOn ref="windows:SUPPORTED_Windows10" />
193
+ <elements>
194
+ <list id="WSLContainerCLIRegistryAllowlist_Input" key="Software\Policies\WSL\WSLContainerCLIRegistryAllowlist" valuePrefix="AllowedRegistry" />
195
+ </elements>
196
+ </policy>
197
+
198
</policies>
199
</policyDefinitions>
intune/en-US/WSL.adml
+12
-1
@@ -8,7 +8,7 @@
8
<string id="WindowsSubsystemForLinux">Windows Subsystem for Linux</string>
9
10
<string id="AllowWSL">Allow the Windows Subsystem for Linux</string>
11
- <string id="AllowWSLExplain">When set to disabled, this policy disables access to the Windows Subsystem for Linux for all users on the machine.</string>
11
+ <string id="AllowWSLExplain">When set to disabled, this policy disables access to running Linux distributions in the Windows Subsystem for Linux for all users on the machine.</string>
12
13
<string id="AllowInboxWSL">Allow the Inbox version of the Windows Subsystem for Linux</string>
14
<string id="AllowInboxWSLExplain">When set to disabled, this policy disables the inbox version (optional component) of the Windows Subsystem for Linux. If this policy is disabled, only the store version of WSL can be used.</string>
@@ -49,11 +49,22 @@
49
<string id="NetworkingModeNAT">NAT</string>
50
<string id="NetworkingModeMirrored">Mirrored</string>
51
<string id="NetworkingModeVirtioProxy">VirtioProxy</string>
52
+
53
+ <string id="WSLContainer">WSL Container</string>
54
+
55
+ <string id="AllowWSLContainer">Allow WSL Container</string>
56
+ <string id="AllowWSLContainerExplain">This policy controls whether WSL Container can be used on this machine. When enabled or not configured, users and Windows applications can run Linux containers via WSL. When set to disabled, WSL Container is blocked for all users and Windows apps cannot run Linux containers. Warning: Setting this to 'Disabled' can break Windows apps that depend on Linux containers.</string>
57
+
58
+ <string id="WSLContainerCLIRegistryAllowlist">Allowlist for WSL container CLI registries</string>
59
+ <string id="WSLContainerCLIRegistryAllowlistExplain">When enabled, the WSL Container CLI will only be allowed to pull images from the registries listed here.</string>
60
</stringTable>
61
<presentationTable>
62
<presentation id="DefaultNetworkingMode">
63
<dropdownList refId="DefaultNetworkingMode_Dropdown" noSort="true" defaultItem="1">Default Networking Mode</dropdownList>
64
</presentation>
65
+ <presentation id="WSLContainerCLIRegistryAllowlist">
66
+ <listBox refId="WSLContainerCLIRegistryAllowlist_Input">Allowed registries</listBox>
67
+ </presentation>
68
</presentationTable>
69
</resources>
70
</policyDefinitionResources>