Forum Discussion
Ability to Block Windows Store on Windows 11 Pro
Dear friends,
I have quite a huge number of student laptops which run Windows 11 Pro (latest) and are connected to Microsoft Entra ID.
The laptops are controlled by InTune.
I am having a problem as they are able to run Windows Store and able to download X-VPN software, even though they do NOT have administrator access to their laptop.
I would like to:
- Be able to block them from loading Windows Store
- Uninstall X-VPN software through inTune
The issue is that, since they are running Windows 11 Pro, I cannot use AppLocker or GPOs since they would need to run the Education or Enterprise version to use AppLocker. The GPO setting to block Store from running has been depricitaed.
Did anyone find a solution to block Windows Store from running on Windows 11 Pro please?
Thanks a lot in advance.
4 Replies
Hi,
Hmm, have you tried blocking it via a Custom OMA-URI profile? Not sure if it will work on PRO, but give it a try.
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/AllowStore
Data type: Integer
Value: 0
or Sign in block same only change the OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Experience/AllowMicrosoftAccountConnection
X-VPN - i will go with a detection/remediation
Good luck!
Hi,
Thanks for your feedback.
Unfortunately, Microsoft restricted the URI: /Device/Vendor/MSFT/Policy/Config/ApplicationManagement/AllowStore
to Enterprise and Educational editions only.
The other URI still provides access to the Store.
I cannot understand how Microsoft comes up with such nonsense when, at the same time, entities are pushing for 'Bring Your Own Device'.
As if I am going to force users to upgrade their O/S to an educational or Enterprise version.
I does not make sense at all.
Thanks
It is nonsense actually and a bad alternative at this point. Did you try to completely uninstall and remove the Store manually or via script on a device?
Good luck!
Would like to know how to to that efficiently too
