Allow Windows Ink Workspace
This device-wide policy value controls whether users can access Windows Ink Workspace and whether the workspace remains available while the device is locked.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\Software\Policies\Microsoft\WindowsInkWorkspace\AllowWindowsInkWorkspace
This device-wide policy value controls whether users can access Windows Ink Workspace and whether the workspace remains available while the device is locked.
The supported numeric values have the following meanings:
0: Windows Ink Workspace is disabled.1: Windows Ink Workspace is enabled, but users cannot access it above the lock screen.2: Windows Ink Workspace is enabled and may also be used above the lock screen. Microsoft documents this as the default value for the corresponding policy.
Notes
Security
With a value of 2, Windows Ink Workspace is available while the device is locked. A person with physical access to the device can therefore use this interface without first unlocking the Windows session.
A value of 1 preserves the workspace for signed-in users while preventing access above the lock screen. A value of 0 turns the feature off completely. This policy does not grant administrative privileges or unlock the Windows session.
Notes
This is a device-scope setting under Computer Configuration and applies across the device.
The setting governs access to Windows Ink Workspace. Other Windows pen and inking capabilities are outside the documented value semantics of this policy.
Microsoft documentation
Microsoft Learn: WindowsInkWorkspace Policy CSP