Windows 10 11 Enterprise Restrict access to MS Store via group policy

Issue presented:  Multiple users are downloading and installing Remote Access tools that are deemed not supported as well as other applications in the environment.  We want to restrict access to the MS Store to Administrators or a specific AD group without using AppLocker or InTune.

I have seen various threads in multiple sources that are conflicting about disabling the store or setting to the Company Portal for Windows 10/11. If you set the MS Store to Company Portal, in Windows 11 it disables the store. 

Turn off the Store application GPO: Denies or allows access to the Store application.  If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.

Other threads as well as the gpo verbiage itself indicate that if you disable the store, all installed applications will no longer update.  There are some threads that state the opposite. https://learn.microsoft.com/en-us/windows/configuration/store/?tabs=gpo

Has anyone configured a way to restrict users or a specific group of users from using the MS Store while allowing existing applications the ability to update?