Forum Discussion

paobmmc's avatar
paobmmc
Copper Contributor
Jul 27, 2023

Block Microsoft Store for non Admin users Intune

Hi, I'm trying to implement this policy for W10E and W11E users/devices, but I'm not doing it right and need your help.

I tried to enable this for 4 users in my org, and I thought that would be enough.

Although it shows in the view report screen the "Check-in status" as "Success" nothing changes on our devices and we can still use the Microsoft Store fine.

 

The info says:

Manages non-administrator users' ability to install Windows app packages. If you enable this policy, non-administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.

 

Which policies should I need to implement to get it right?

Thank you.

4 Replies

  • Mathg76's avatar
    Mathg76
    Brass Contributor

    paobmmc 

     

    Hi, the correct configuration for your question is : 

    Than your store will be block but apps will continue to update.

     

    • paobmmc's avatar
      paobmmc
      Copper Contributor

      Mathg76 

      Thank you I’ll try it

      Would it still be possible to install apps for all users via command line?

      Using winget or Add-AppxPackage?

      • Mathg76's avatar
        Mathg76
        Brass Contributor

        paobmmc 

         

        When you go in the app section of intune and select Add you get a bunch of different type you can add

         

         

        The Microsoft Store app (new) is at my point of view the most easiest one. 

        The line of business app must be the one you seeking.

  • jrngsg's avatar
    jrngsg
    Iron Contributor
    suggest only allow private store rather than block the store.
    https://cloudinfra.net/how-to-disable-microsoft-store-in-windows-using-intune/

Resources