Forum Discussion
AutoJuan
Mar 25, 2021Copper Contributor
Locking down the Microsoft Store
Hi Tech Community, I am currently trying to find a way to lock down the Microsoft Store on our enterprise devices running Windows 10. I am aware that we can redirect our users to use a curate...
RobinCM
Jul 14, 2022Brass Contributor
It's a complete mess, the only way we found to lock the store down was using AppLocker.
You can add all the default Windows apps to a policy really easily if you install GPMC onto one of your endpoint devices and edit the policy from that.
The user experience isn't ideal - you just get an error message if you try and install a non-approved app, but it works and stops apps you haven't approved from being installed. I'm using this on Win11 but it'll work on Win10 too.
Make sure you have a policy entry to allow administrators to run any application.
You can add all the default Windows apps to a policy really easily if you install GPMC onto one of your endpoint devices and edit the policy from that.
The user experience isn't ideal - you just get an error message if you try and install a non-approved app, but it works and stops apps you haven't approved from being installed. I'm using this on Win11 but it'll work on Win10 too.
Make sure you have a policy entry to allow administrators to run any application.