Forum Discussion
Locking down the Microsoft Store
Hi Tech Community, I am currently trying to find a way to lock down the Microsoft Store on our enterprise devices running Windows 10. I am aware that we can redirect our users to use a curate...
Rudy_Ooms_MVP Blocking the store completely isn't an option due to the amount of Windows functionality that would never update if you did, and some manufacturers are delivering drivers and support software through the store, e.g. it seems to be the only way to get the Waves MaxxAudio driver. No Store = no audio functionality on your machine 😞
It's a shame Microsoft have made such a mess of being able to manage it, this stuff has been possible on other platforms for a very long time, and was possible on Windows until fairly recently. It's bizarre that any product manager would think the current situation is acceptable for a release product used in business (i.e Windows Pro/Enterprise).
Block Microsoft Store using AppLocker
Type secpol in the search bar to find and start AppLocker.
In the console tree of the snap-in, click Application Control Policies, click AppLocker, and then click Packaged app Rules.
On the Action menu, or by right-clicking on Packaged app Rules, click Create New Rule.
On Before You Begin, click Next.
On Permissions, select the action (allow or deny) and the user or group that the rule should apply to, and then click Next.
Regards,
Rachel Gomez
Type secpol in the search bar to find and start AppLocker.
In the console tree of the snap-in, click Application Control Policies, click AppLocker, and then click Packaged app Rules.
On the Action menu, or by right-clicking on Packaged app Rules, click Create New Rule.
On Before You Begin, click Next.
On Permissions, select the action (allow or deny) and the user or group that the rule should apply to, and then click Next.
Regards,
Rachel Gomez
- Is this not working on a Windows 10 Home device because the user is an Administrator?
I believe i configured it as stated above to Deny the Microsoft Store.- Windows 10 home 🙂 as home in no support for aadj and almost no support for intune 🙂
- Thanks. While the business case for disabling or controlling the Store is obvious, it should be even more obvious to designers and program managers that controlling Store access for kids is essential functionality.
The Store should be controllable via Microsoft Family Security functionality. Child access should be controllable. Please pass this on to folks responsible for Family account design. Thanks.
