Unified Write Filter - Configuration Details

Use the Unified Write Filter (UWF) configuration to restrict Windows Modern device users from making unauthorized changes to the device.

Note: A device restart is required for the configuration to take effect.

Note: Unenrolling a device from SOTI MobiControl does not remove the UWF configuration from the device.

Current Session

Configuration	Description
Warning Overlay Threshold	Specify the threshold value (in MB) that triggers a warning notification when the overlay size equals or exceeds it.
Critical Overlay Threshold	Specify the threshold value (in MB) that triggers a critical notification when the overlay size equals or exceeds it.
Commit File	Specify the files targeted for committing changes from the overlay to the physical volume within a protected volume.

Next Session

Configuration	Description
Filter Enabled	Enable the UWF for the next session. It is enabled by default.
Volume to Protect	Specify the volume to be protected in the next session.
Overlay Type	Choose the overlay type from:Disk and RAM. Note: Filter Enabled must be disabled in the Current Session.
Maximum Overlay Size	Specify the maximum cache size (in MB) of the overlay for the next session. Note: Filter Enabled must be disabled in the Current Session.
Bind by Drive Letter	Enable the toggle to specify the type of binding the volume uses in the next session
Persist Domain Secret Key	Enable to specify whether the domain secret registry key is in the exclusion list. Note: If the registry key is not in the exclusion list, changes do not persist after a restart.
Persist TSCAL	Toggle on to put the Terminal Server Client Access License (TSCAL) registry key in the UWF registry exclusion list. Note: If the registry key is not in the exclusion list, changes do not persist after a restart.
Servicing Enabled	Toggle on to enable servicing.
Excluded Registry	Specify all the registry exclusions for the next session.
Excluded Path	Specify the full path of the file or folder to exclude in the related volume.

Note: For multiple profiles with the UWF payload, the following configurations are applied:

The property with more space in either profile is assigned.
The union of data tables from both profiles is assigned to the devices

Note: If multiple profiles with the UWF payload are assigned to a device and one profile is revoked, the exclude paths and exclude registry of the removed profile is deleted. The UWF state stays enabled if a profile with this property is assigned, and the assigned profile's paths and registries remain unchanged.