Evolving the Microsoft Store for Business and Education

Chiming in here as this is something I've had to deal with personally.  I wanted to make sure apps continue to get updated, included non-provisioned inbox apps that we don't explicitly add to Intune, because there have been security vulnerabilities in them.  We want to block the store itself, but we still want the apps to update.

• Block the store using GP or Intune
• Look at an app that is out of date in Settings.
• You can run a WMI Method to update apps if they are needed.  However, this method requires administrative rights.  They should update on their own though, but I cannot comment on non-free apps, at least, not yet.

Get-CimInstance -Namespace root\cimv2\mdm\dmmap -ClassName MDM_EnterpriseModernAppManagement_AppManagement01 | Invoke-CimMethod -MethodName UpdateScanMethod

Personally, my problem with all of this isn't the store itself, or the business store, but just the AppX model.  The architecture behind modern apps is just awful, filled with privileged escalations all of the place, multiple locations where files are kept, inability to remove an app if it's lodged in profiles etc, it's just an administrator's nightmare.  Add in any sort of change - like what this is all about, and go figure, people have problems because it's already a difficult ecosystem to support and manage to begin with, and it's just unnecessarily complicated, filled with gotchas.