I have just spent an hour checking every setting in a device restrictions template and none of these answers are correct.
Device Experience: Doesn't exist as category in standard device restriction template
General: Screen cap, Copy paste, man. unenrol, man. root cert install, camera, onedrive file sync, removable storage, geolocation, internet sharing, phone reset, usb connection, antitheft mode, Cortana, voice recording, device name mod, add provisioning packages, remove prov pack, device discovery, task switcher, sim card error, ink workspace, autopilot reset, require network during setup, DMA, End process from task man.
Connectivity: Bunch of wifi and bluetooth settings, no maintenance window.
Power Settings: Plugged in and on battery behaviours, no maintenance window.
You can do this with a config policy through the settings catalogue and WUfB but as it stands I don't think this question makes much sense.