Home Docs Claude Documentation

One capture · claude-docs

One read of Claude Documentationclaude-docs-20261029T190716Z

4 pages moved out of 280 read.

Pages moved 4 significant first

Pages read 280 in this capture

Captured 29 Oct 2026 19:07 UTC

Corpus hash 142630da9d93 corpus-hash

What this read moved

1-4 of 4

third-party/claude-desktop/admin-console Changed · +3 / -16 lines

### Keep Chat and Cowork off

from line 149

149149

150150For example, if the Traders policy (ranked first) turns Code off and selects the wiki server, and the Analysts policy (ranked second) sets a token limit and selects the tickets server, a user in both groups has Code off, the Analysts token limit, and both servers. Everything these policies leave unset comes from the organization-wide settings, and a user in no listed group gets the organization-wide settings unchanged. Groups are managed on the **Groups** page under **People**, including groups synced from your identity provider.

151151

152A group's policy can also turn on Unified Claude for that group, as described under [Turn on Unified Claude](#turn-on-unified-claude). From November 10, 2026, Unified Claude is on by default even for a group whose policy turns Cowork off, as described under [Keep Chat and Cowork off](#keep-chat-and-cowork-off).

153153

154154### Turn on Unified Claude

155155

from line 168

168168>

169169> When you turn on Unified Claude for your organization, it is on for every group. That includes a group whose policy turns Chat or Cowork off. From November 10, 2026, the default does the same, so a group whose policy turns Cowork off gets Cowork.

170170>

171> To keep Chat and Cowork off for a group, turn off the **Chat and Cowork unified view** switch in the group's policy, as described under [Keep Chat and Cowork off](#keep-chat-and-cowork-off). Where Unified Claude is still off for your organization, set the group's switches before you turn Unified Claude on. For a member of several groups, Unified Claude comes from the highest-ranked of their policies that sets it, even when a higher-ranked policy turns Chat or Cowork off.

171> For a member of several groups, Unified Claude comes from the highest-ranked of their policies that sets it, even when a higher-ranked policy turns Chat or Cowork off.

172172

173173To turn on Unified Claude for your whole organization, open **Organization settings** and go to the **Capabilities** page under **Desktop 3P**. Under **Allowed surfaces**, turn on the **Opt into the new Chat and Cowork unified view** switch. If the **Chat and Cowork unified view** switch under it is off, turn it on. Click **Save changes**.

174174

from line 190

190190

191191Click **Save changes**.

192192

193Until November 10, 2026, you can turn Unified Claude off again for your organization or for a group. From that date, the same changes leave Unified Claude on by default, whatever the **Chat** and **Cowork** switches say. To keep Cowork off from then on, see [Keep Chat and Cowork off](#keep-chat-and-cowork-off).

194194

195195* **For your whole organization**: open **Organization settings** and go to the **Capabilities** page under **Desktop 3P**. Under **Allowed surfaces**, turn off the **Opt into the new Chat and Cowork unified view** switch. The **Chat** and **Cowork** switches reappear in the positions they had. Switches that nobody set are at their defaults. Cowork is on, and Chat and advanced file analysis are off. Set the switches as you want, then click **Save changes**.

196196* **For a group**: while Unified Claude is off for your organization, open **Organization settings**, go to the **Permission policies** page under **People**, and open the group's policy. If the policy has other settings, click **Reset to default** in the **Opt into the new Chat and Cowork unified view** row, then click **Save changes**. If the policy has no other settings, remove the policy with **Remove policy** on the **Permission policies** page. Until November 10, 2026, the **Chat** and **Cowork** switches then apply to the group again.

197197

198198Turning on the **Opt into the new Chat and Cowork unified view** switch sets the [`desktopHome`](https://claude.com/docs/third-party/claude-desktop/configuration#desktophome) key, and turning it off removes the key. The **Chat and Cowork unified view** switch saves the value `standard` when it is on and `off` when it is off. With the value `off`, the **Opt into the new Chat and Cowork unified view** switch stays on, and Chat and Cowork are off entirely. Users' apps pick up the change as described under [Configuration updates](#configuration-updates).

199

200### Keep Chat and Cowork off

201

202Where [Unified Claude](https://claude.com/docs/third-party/claude-desktop/unified-claude.md) is on by default, Cowork is on even where the **Cowork** switch is off for your organization or in a group's policy. To keep Cowork off, turn off the **Chat and Cowork unified view** switch. That turns Chat off too and leaves users with Code only. Make the change before November 10, 2026, so that Cowork doesn't come on first. Users' apps pick up the change as described under [Configuration updates](#configuration-updates).

203

204Devices that [use a managed profile's configuration](#devices-with-a-managed-profile) don't follow the console. To keep Cowork off on those devices, see [Keep Cowork off](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#keep-cowork-off).

205

206The **Chat and Cowork unified view** switch can't be turned off while the **Code** switch in the same list is off, so these steps turn on **Code** first.

207

208* **For your whole organization**: open **Organization settings** and go to the **Capabilities** page under **Desktop 3P**. Under **Allowed surfaces**, turn on the **Code** switch if it is off, then the **Opt into the new Chat and Cowork unified view** switch if it is off. If the **Chat and Cowork unified view** switch under it is on, turn it off. Click **Save changes**. Chat and Cowork are then off for each group unless the group's policy turns on the **Chat and Cowork unified view** switch. That includes a group whose policy turns Chat or Cowork on.

209* **For a group**: open **Organization settings**, go to the **Permission policies** page under **People**, and open the group's policy. In the policy's **Capabilities** section, turn on the **Code** switch if it is off, then the **Opt into the new Chat and Cowork unified view** switch if it is off. If the **Chat and Cowork unified view** switch under it is on, turn it off. Click **Save changes**.

210

211For a member of several groups, the highest-ranked of their policies that sets the **Opt into the new Chat and Cowork unified view** or **Chat and Cowork unified view** switch decides.

212199

213200### Plugin marketplaces

214201

third-party/claude-desktop/unified-claude Changed · +4 / -16 lines

## Keep Cowork off

from line 4

55> [!NOTE]

66>

7> Unified Claude is in beta. It is opt-in until November 10, 2026. From that date, Unified Claude is [on by default](#enabling-unified-claude). Cowork is then on too, even where you turned Cowork off. To keep Cowork off, see [Keep Cowork off](#keep-cowork-off). New [Enterprise Admin Console](https://claude.com/docs/third-party/claude-desktop/admin-console.md) organizations start with Unified Claude on.

7> Unified Claude is in beta. It is opt-in until November 10, 2026. From that date, Unified Claude is [on by default](#enabling-unified-claude). Cowork is then on too, even where you turned Cowork off. New [Enterprise Admin Console](https://claude.com/docs/third-party/claude-desktop/admin-console.md) organizations start with Unified Claude on.

99Unified Claude combines Chat and Cowork into one experience in Claude Desktop 3P. Users get a single Claude interface for both quick chats and longer agentic tasks. [Code](https://claude.com/docs/third-party/claude-desktop/code.md) stays separate.

1010

from line 26

2626

2727> [!WARNING]

2828>

29> The default applies even where [`chatTabEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#chattabenabled), [`chatAdvancedFileAnalysisEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#chatadvancedfileanalysisenabled), or [`coworkTabEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#coworktabenabled) is `false`. Cowork is on even where you turned it off. To keep Cowork off, see [Keep Cowork off](#keep-cowork-off).

3030

3131If you use [`chatSessionRetentionDays`](https://claude.com/docs/third-party/claude-desktop/configuration#chatsessionretentiondays), set [`coworkSessionRetentionDays`](https://claude.com/docs/third-party/claude-desktop/configuration#coworksessionretentiondays) as well, before November 10, 2026, or earlier if you turn on Unified Claude yourself. `coworkSessionRetentionDays` covers new conversations that are Cowork sessions, along with users' other Cowork tasks, as described under [Automatic deletion of idle sessions](https://claude.com/docs/third-party/claude-desktop/data-storage.md#automatic-deletion-of-idle-sessions).

3232

from line 35

3535* **Enterprise Admin Console**: Go to Capabilities and toggle on "Opt into the new Chat and Cowork unified view."

3636* **MDM or a bootstrap server**: For MDM and bootstrap deployments, the [`desktopHome`](https://claude.com/docs/third-party/claude-desktop/configuration#desktophome) key controls Unified Claude. Create and set `desktopHome` to `standard` in your [MDM profile](https://claude.com/docs/third-party/claude-desktop/mdm.md) or [bootstrap response](https://claude.com/docs/third-party/claude-desktop/bootstrap.md). Claude Desktop reads a value it doesn't recognize as `off`. Until November 10, 2026, removing the key turns Unified Claude off.

3737

38## Keep Cowork off

40Where Unified Claude is [on by default](#enabling-unified-claude), Cowork is on even if you turned it off with [`coworkTabEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#coworktabenabled) or with the **Cowork** switch in the Enterprise Admin Console. To keep Cowork off, turn off Chat and Cowork where each device gets its settings:

42* **From the Enterprise Admin Console**: follow the steps under [Keep Chat and Cowork off](https://claude.com/docs/third-party/claude-desktop/admin-console.md#keep-chat-and-cowork-off) for your organization or for a group. Devices that [use an MDM profile's configuration](https://claude.com/docs/third-party/claude-desktop/admin-console.md#devices-with-a-managed-profile) don't follow the console, so make the change for them in the profile, or on its bootstrap server if it has one.

43* **From a bootstrap server or a Claude apps gateway**: set [`desktopHome`](https://claude.com/docs/third-party/claude-desktop/configuration#desktophome) to `off` in your [bootstrap response](https://claude.com/docs/third-party/claude-desktop/bootstrap.md), or in the `desktop` block of your gateway's `managed` policies, as described under [Claude Desktop overlay](https://code.claude.com/docs/en/claude-apps-gateway-config#claude-desktop-overlay). Once a device has fetched its settings, it [ignores `desktopHome` in its MDM profile](https://claude.com/docs/third-party/claude-desktop/configuration-format#which-configuration-source-applies-on-a-device).

44* **From an MDM profile alone**: set `desktopHome` to `off` in the [MDM profile](https://claude.com/docs/third-party/claude-desktop/mdm.md)

46Turning off the console's **Chat and Cowork unified view** switch or setting `desktopHome` to `off` turns Chat off too, even where `chatTabEnabled` is `true`. That leaves users with [Code](https://claude.com/docs/third-party/claude-desktop/code.md) only. If Code is off, set [`isClaudeCodeForDesktopEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#isclaudecodefordesktopenabled) to `true` in the same change. With either setting and Code off, Claude Desktop has nothing to open, and it doesn't turn Cowork back on.

48Users lose Chat as soon as their devices apply the change, even before November 10, 2026. Make the change before that date so that Cowork doesn't come on first.

50To leave Cowork on and limit what Claude can do in it, use settings such as [`disabledBuiltinTools`](https://claude.com/docs/third-party/claude-desktop/configuration#disabledbuiltintools), [`builtinToolPolicy`](https://claude.com/docs/third-party/claude-desktop/configuration#builtintoolpolicy), [`allowedWorkspaceFolders`](https://claude.com/docs/third-party/claude-desktop/configuration#allowedworkspacefolders), and [`scheduledTasksEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#scheduledtasksenabled). For example, to stop Claude from running shell commands, add `"Bash"` to `disabledBuiltinTools`. That entry applies in Code sessions too, as described under [Sandbox network access](https://claude.com/docs/third-party/claude-desktop/chat.md#sandbox-network-access).

5238## How Unified Claude interacts with Chat and Cowork settings

5339

5440Claude Desktop ignores [`chatTabEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#chattabenabled), [`chatAdvancedFileAnalysisEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#chatadvancedfileanalysisenabled), and [`coworkTabEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#coworktabenabled) when your configuration sets `desktopHome`, whether to `standard` or to `off`. It also ignores them while Unified Claude is on by default. New conversations that are Cowork sessions follow the Cowork retention period. The Chat retention period still covers Chat conversations, such as earlier chats.

5541

5642Your other settings still apply, including [`isClaudeCodeForDesktopEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#isclaudecodefordesktopenabled), which controls Code.

44To limit what Claude can do in Cowork, use settings such as [`disabledBuiltinTools`](https://claude.com/docs/third-party/claude-desktop/configuration#disabledbuiltintools), [`builtinToolPolicy`](https://claude.com/docs/third-party/claude-desktop/configuration#builtintoolpolicy), [`allowedWorkspaceFolders`](https://claude.com/docs/third-party/claude-desktop/configuration#allowedworkspacefolders), and [`scheduledTasksEnabled`](https://claude.com/docs/third-party/claude-desktop/configuration#scheduledtasksenabled). For example, to stop Claude from running shell commands, add `"Bash"` to `disabledBuiltinTools`. That entry applies in Code sessions too, as described under [Sandbox network access](https://claude.com/docs/third-party/claude-desktop/chat.md#sandbox-network-access).

5745

third-party/claude-desktop/chat Changed · +1 / -1 lines

from line 4

55> [!NOTE]

66>

7> When [Unified Claude](https://claude.com/docs/third-party/claude-desktop/unified-claude.md) is on, a message sent from the home screen starts a Cowork session on a device that can run Cowork. From November 10, 2026, Unified Claude is [on by default](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#enabling-unified-claude). Cowork is then on too, even where you turned Cowork off. To keep Cowork off, see [Keep Cowork off](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#keep-cowork-off).

99Chat in Claude Desktop on third-party (3P) is a conversational surface for quick questions and drafting. Unlike [Cowork](https://claude.com/docs/cowork/overview.md) and [Code](https://claude.com/docs/third-party/claude-desktop/code.md), which run agentic sessions with access to folders you grant and a code-execution environment, a Chat conversation runs with a deliberately small tool surface: it can search and fetch the web under your admin configuration, read files attached to the conversation, read and update the project's memory and read the files in the project's folders when the conversation is inside a project, write files into a scratch space of its own, and use skills from the plugins you provision, and nothing else on the machine. While `desktopHome` is unset and Unified Claude is off, Chat is off by default and is enabled with a single configuration key.

1010

third-party/claude-desktop/mdm Changed · +1 / -1 lines

from line 44

4444| **Egress** | A read-only firewall allowlist derived from everything you've entered above, grouped by feature **Copy hostnames**, **Download .txt**, and **Test connectivity** actions |

4545| **Source** | The bootstrap keys, if you are using the [bootstrap server](https://claude.com/docs/third-party/claude-desktop/bootstrap.md) delivery model instead of a full MDM profile Bootstrap-delivered configuration takes priority over MDM-delivered values: it replaces them wholesale rather than merging key by key |

4646

47To turn on [Unified Claude](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#enabling-unified-claude), set `desktopHome` to `standard` in your MDM profile. To keep Cowork off from November 10, 2026, see [Keep Cowork off](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#keep-cowork-off).

47To turn on [Unified Claude](https://claude.com/docs/third-party/claude-desktop/unified-claude.md#enabling-unified-claude), set `desktopHome` to `standard` in your MDM profile.

4848

4949> [!NOTE]

5050>