Event details
Will apps.microsoft.com installers be brought into the fold to follow settings like the built-in app store? Having students bypass the app store restriction by using the website is a large security hole and using workarounds to patch it is clunky and annoying. I have not investigated the new command line store but I fear it is another hole in app security and management.
MicrosoftHi Chris650, Is this still a challenge. I thought that this was addressed/closed?
It has not. The installers downloaded from apps.microsoft.com bypass the local settings for the app store. Coupled with "free" apps not requiring a sign in to download the apps leads to users trying to install apps and a multitude of workarounds to block them without breaking all app store apps like the ones that are properly pushed through intune.
- Jason_Sandys
I was just reminded of how to address this: block get.microsoft.com. This is documented at How to use the Microsoft Store Web Installer to distribute your apps on the web. - Windows apps | Microsoft Learn