Admin settings move from guidance to enforcement
Administrator settings for AI tools stop being advice the model follows and become controls the product enforces.
The pattern so far
In August 2026 Anthropic shipped organisation instructions and described them as guidance, not an enforced control. In September the same vendors, and Google and OpenAI with them, moved the other way: settings that block sessions, fail closed on misconfiguration, switch scheduled tasks off and put an expiry on standing approvals. Many data points come from Claude Desktop release notes, which are unusually detailed, so the pattern is read across vendors and not from one changelog.
Trajectory
Month by month
- Accelerating Reconstructed
Settings started to stop the product. A disabled Claude Code flag now blocks sessions, Gemini Enterprise's data protection policies inspect and block content in GA, a required Microsoft broker setting fails sign-in instead of falling back, GPT-6 Astra shipped with enterprise access off by default, Gemini blocks URL ingestion inside VPC Service Controls, and Workspace added temporary administrator roles.
- isClaudeCodeForDesktopEnabled set to false now prevents Code sessions starting.
- Sensitive Data Protection content policies are GA for connectors, apps and Notebook Enterprise.
- microsoftAuthBroker: required makes sign-in fail rather than fall back to the browser.
- GPT-6 Astra ships with enterprise access off by default.
- Gemini Enterprise blocks website URL ingestion in projects with VPC Service Controls.
- scheduledTasksEnabled set to false hides the Scheduled page and stops existing tasks.
- mcpScheduledTaskApprovalLifetimeDays caps how long a scheduled task's approvals last.
- Google Workspace adds temporary administrator roles.
- Emerging Reconstructed
Anthropic shipped organisation-wide instructions and called them guidance the model follows, not an enforced control. On the same day OpenAI shipped an Admin plugin that changes workspace settings directly, which put the difference between advice and control on the record.
Before it became a pattern
Early sightings that did not yet pass the entry rule on their own.