Dokumentationerreichbar
Anthropic, Deploy managed settings
code.claude.com (externe Seite)
Die Dokumentation zur Verteilung verwalteter Einstellungen auf die Rechner einer Organisation: Wege je Betriebssystem, wie Claude Code mehrere verwaltete Quellen zusammenführt und wie man die Durchsetzung prüft.
geprüft 10.11.2026
Worauf sich diese Seite beruft, wörtlich, abgerufen am 12.10.2026:
Managed settings are the settings your organization deploys to every developer’s machine.
bestätigt 10.11.2026Every mechanism carries the same policy keys as a
bestätigt 10.11.2026managed settings bind Claude Code only
bestätigt 10.11.2026still pick the model for that session
bestätigt 10.11.2026Fetched at startup and polled hourly
bestätigt 10.11.2026Read at startup and checked for changes every 30 minutes
bestätigt 10.11.2026Read at startup and reloaded when a file changes
bestätigt 10.11.2026the later file’s value replaces the earlier one
bestätigt 10.11.2026the two lists combine, with duplicates removed
bestätigt 10.11.2026When more than one mechanism delivers a policy to the same machine, Claude Code by default uses one and ignores the others.
bestätigt 10.11.2026Claude Code shows no warning for the sources it skips
bestätigt 10.11.2026turn it on only when every source ranked below your highest one is under an administrator’s control
bestätigt 10.11.2026check that it sits at the path for the OS
bestätigt 10.11.2026Claude Code refuses to start and prints
bestätigt 10.11.2026the key reads as that value until you fix it
bestätigt 10.11.2026a developer who is an administrator on the machine can edit the managed source itself
bestätigt 10.11.2026delivers managed settings per Id
bestätigt 10.11.2026P group Claude Code leaves the user-writable HKCU registry out of that scan
bestätigt 10.11.2026The user-writable HKCU registry never merges with another source.
bestätigt 10.11.2026Read it to distinguish a policy that never reached the machine from one that reached it and that a higher-priority source overrode.
bestätigt 10.11.2026A malformed value in the user-writable HKCU registry key never blocks launch.
bestätigt 10.11.2026it drops allow rules a host supplies as parent settings, as --allowed
bestätigt 10.11.2026Tools, or in a settings file, so writes to those folders lose their pre-approval The emitted managed
bestätigt 10.11.2026Settings object is the only managed settings for the session any schema violation that survives fails the whole helper run
bestätigt 10.11.2026Claude Code calls these parent settings.
bestätigt 10.11.2026By default, Claude Code ignores parent settings whenever an admin source is present
bestätigt 10.11.2026keeps only the host’s values that restrict what Claude can do
bestätigt 10.11.2026unless you also set the allow
bestätigt 10.11.2026Managed*Only locks, the host’s permission allow rules and sandbox allowlists still apply (parent process): an embedding host supplied restrictive settings
bestätigt 10.11.2026(helper): a policy
bestätigt 10.11.2026Helper configured by the selected MDM or file source an Owner enables or disables Remote Control and cloud sessions organization-wide in Claude Code admin settings
bestätigt 10.11.2026Cloud sessions have no per-device managed settings key.
bestätigt 10.11.2026Claude Code takes the login keys from that policy or file, even for a key remote settings also set
bestätigt 10.11.2026if the policy or file omits either key, the value in remote settings applies
bestätigt 10.11.2026Until every client runs v2.1.299 or later, set the keys in server-managed settings from claude.ai as well
bestätigt 10.11.2026When that policy sets any policy key, Claude Code ignores login keys in the file
bestätigt 10.11.2026so set login keys such as force
bestätigt 10.11.2026Login Org UUID in the MDM policy or file apart from forceRemoteSettingsRefresh, which has its own startup rule
bestätigt 10.11.2026