Configure the level of TPM owner authorization information available to the operating system: registry value OSManagedAuthLevelComputerHKLM\Software\Policies\Microsoft\TPM
- Policy ID
- OSManagedAuth_Name
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Trusted Platform Module Services
Registry
OSManagedAuthLevel
REG_DWORDComputerHKLM\Software\Policies\Microsoft\TPM Current key
- Enabled value
- Depends on the option value
- Element
- Operating system managed TPM authentication level:
| Item | Stored value |
|---|---|
| Full | 4 |
| Delegated | 2 |
| None | 0 |
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\TPM] ; Options (use only one) ; Full "OSManagedAuthLevel"=dword:00000004 ; Delegated "OSManagedAuthLevel"=dword:00000002 ; None "OSManagedAuthLevel"=dword:00000000
CMD
:: Options (use only one) :: Full reg add "HKLM\Software\Policies\Microsoft\TPM" /v "OSManagedAuthLevel" /t REG_DWORD /d 4 /f :: Delegated reg add "HKLM\Software\Policies\Microsoft\TPM" /v "OSManagedAuthLevel" /t REG_DWORD /d 2 /f :: None reg add "HKLM\Software\Policies\Microsoft\TPM" /v "OSManagedAuthLevel" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Microsoft\TPM' -Force | Out-Null # Options (use only one) # Full New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\TPM' -Name 'OSManagedAuthLevel' -PropertyType DWord -Value 4 -Force | Out-Null # Delegated New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\TPM' -Name 'OSManagedAuthLevel' -PropertyType DWord -Value 2 -Force | Out-Null # None New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\TPM' -Name 'OSManagedAuthLevel' -PropertyType DWord -Value 0 -Force | Out-Null