d. disable/enable Advertising (for LE)

21. 
    enable/disable display notification in the locked state of: [
    
    1. 
       email notifications,
       
    2. 
       calendar appointments,
       
    3. 
       contact associated with phone call notification,
       
    4. 
       text message notification,
       
    5. 
       other application-based notifications,
       
    6. 
       all notifications]
       

22. 
    enable/disable all data signaling over [USB hardware ports]
    

Windows-Kernel-PnP: 832, 801

23. 
    enable/disable [none, Assign personal Hotspot connections]
    

24. 
    enable/disable developer modes
    

DeviceManagement-Enterprise-Diagnostics-Provider/Admin: 813

Microsoft-Windows-GroupPolicy/Operational: 1502

25. 
    enable data-at rest protection
    

26. 
    enable removable media’s data-at-rest protection
    

27. 
    enable/disable bypass of local user authentication
    

28. 
    wipe Enterprise data
    

29. 
    approve [import, removal] by applications of X.509v3 certificates in the Trust Anchor Database
    

30. 
    configure whether to establish a trusted channel or disallow establishment if the TSF cannot establish a connection to determine the validity of a certificate
    

31. 
    enable/disable the cellular protocols used to connect to cellular network base stations
    

32. 
    read audit logs kept by the TSF
    

33. 
    configure [certificate] used to validate digital signature on applications
    

34. 
    approve exceptions for shared use of keys/secrets by multiple applications
    

35. 
    approve exceptions for destruction of keys/secrets by applications that did not import the key/secret
    

36. 
    configure the unlock banner
    

37. 
    configure the auditable items
    

38. 
    retrieve TSF-software integrity verification values
    

39. 
    enable/disable [selection:
    
    1. 
       USB mass storage mode,
       
    2. 
       USB data transfer without user authentication,
       

40. 
    enable/disable backup to [remote system]
    

41. 
    enable/disable [
    

1. 
   USB tethering authenticated by [pre-shared key, passcode, no authentication]]
   

42. 
    approve exceptions for sharing data between [selection: application processes, groups of application processes]
    

43. 
    place applications into application process groups based on [assignment: application characteristics]
    

44. 
    enable/disable location services:
    
    1. 
       across device