Forum Discussion

AutoJuan's avatar
AutoJuan
Copper Contributor
Mar 26, 2021

Locking down the Microsoft Store

Hi Tech Community,   I am currently trying to find a way to lock down the Microsoft Store on our enterprise devices running Windows 10.   I am aware that we can redirect our users to use a curate...
RobinCM's avatar
RobinCM
Brass Contributor
Jul 15, 2022

Rudy_Ooms_MVP Blocking the store completely isn't an option due to the amount of Windows functionality that would never update if you did, and some manufacturers are delivering drivers and support software through the store, e.g. it seems to be the only way to get the Waves MaxxAudio driver. No Store = no audio functionality on your machine 😞

It's a shame Microsoft have made such a mess of being able to manage it, this stuff has been possible on other platforms for a very long time, and was possible on Windows until fairly recently. It's bizarre that any product manager would think the current situation is acceptable for a release product used in business (i.e Windows Pro/Enterprise).

  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    Jul 19, 2022
    🙂 ... I guess you misread the article.. as I am not advising the block/remove the store at all... but just limiting it with the use of applocker and packaged app rules 🙂
    • RobinCM's avatar
      RobinCM
      Brass Contributor
      May 15, 2023

      Rudy_Ooms_MVP Hmm, yeah not sure what I had been reading... I was on a bit of a rant about how annoying the situation is/was - apologies for that :facepalm:

      Also, have you seen the interesting (but sadly [hilariously] broken) new Store "integration" with AppLocker since Store version 22303.1401.5.0? Could be really good if they hadn't messed up the version checking...

  • rachelgomez161999's avatar
    rachelgomez161999
    Iron Contributor
    Jul 19, 2022
    Block Microsoft Store using AppLocker

    Type secpol in the search bar to find and start AppLocker.
    In the console tree of the snap-in, click Application Control Policies, click AppLocker, and then click Packaged app Rules.
    On the Action menu, or by right-clicking on Packaged app Rules, click Create New Rule.
    On Before You Begin, click Next.
    On Permissions, select the action (allow or deny) and the user or group that the rule should apply to, and then click Next.

    Regards,
    Rachel Gomez
    • Randall Rotter's avatar
      Randall Rotter
      Copper Contributor
      Oct 14, 2022
      Is this not working on a Windows 10 Home device because the user is an Administrator?
      I believe i configured it as stated above to Deny the Microsoft Store.
      • Rudy_Ooms_MVP's avatar
        Rudy_Ooms_MVP
        MVP
        Oct 14, 2022
        Windows 10 home 🙂 as home in no support for aadj and almost no support for intune 🙂

Resources