WSL Windows Subsystem for Linux Windows Subsystem for Linux Allow the Windows Subsystem for Linux When set to disabled, this policy disables access to running Linux distributions in the Windows Subsystem for Linux for all users on the machine. Allow the Inbox version of the Windows Subsystem for Linux When set to disabled, this policy disables the inbox version (optional component) of the Windows Subsystem for Linux. If this policy is disabled, only the store version of WSL can be used. Allow WSL1 When set to disabled, this policy disables WSL1. When disabled, only WSL2 distributions can be used. Allow custom kernel configuration When set to disabled, this policy disables custom kernel configuration via .wslconfig (wsl2.kernel). This policy only applies to Store WSL. Allow custom system distribution configuration When set to disabled, this policy disables custom system distribution configuration via .wslconfig (wsl2.systemDistro). This policy only applies to Store WSL. Allow kernel command line configuration When set to disabled, this policy disables kernel command line configuration via .wslconfig (wsl2.kernelCommandLine). This policy only applies to Store WSL. Allow the debug shell When set to disabled, this policy disables the debug shell (wsl.exe --debug-shell). This policy only applies to Store WSL. Allow nested virtualization When set to disabled, this policy disables nested virtualization configuration via .wslconfig (wsl2.nestedVirtualization). This policy only applies to Store WSL. Allow kernel debugging When set to disabled, this policy disables kernel debugging configuration via .wslconfig (wsl2.kernelDebugPort). This policy only applies to Store WSL. Allow custom networking configuration When set to disabled, this policy disables custom networking configuration via .wslconfig (wsl2.networkingMode). This policy only applies to Store WSL. Allow user setting firewall configuration When set to disabled, this policy disables firewall configuration via .wslconfig (wsl2.firewall). This policy only applies to Store WSL. Allow passthrough disk mount When set to disabled, this policy disables passthrough disk mounting in WSL2 (wsl.exe --mount). This policy only applies to Store WSL. Configure default networking mode This policy specifies the default networking mode to be used for WSL2. None NAT Mirrored Consomme WSL container Allow WSL container This policy controls whether WSL container can be used on this machine. When enabled or not configured, users and Windows applications can run Linux containers via WSL. When set to disabled, WSL container is blocked for all users and Windows apps cannot run Linux containers. Warning: Setting this to 'Disabled' can break Windows apps that depend on Linux containers. Allowlist for WSL container registries When enabled, WSL container will only be allowed to pull images from the registries listed here. This affects both the WSL container CLI and all applications using the WSL container API. Default Networking Mode Allowed registries