Event details
We are looking for a solution to ensure that Windows‑integrated Microsoft Store apps, such as Calculator and Notepad, are regularly updated, even if the user does not actively use them. As IT Security classifies these apps as a security risk.
- EricMoe
Microsoft
BarbaraW Store apps should automatically update unless the policy Turn off Automatic Download and Install of Updates has been enabled. Add Microsoft Store Apps to Microsoft Intune - Microsoft Intune | Microsoft Learn
EricMoe I don't believe this is the case when the app is never used. An old version remains installed in the C:\Program Files\WindowsApps folder. I've seen this myself in my org. I would also like clarification on this.
- Jason_Sandys
The automatic update process can take up to 7 days on a device -- there is no way to explicitly control this. Use of the app is not a consideration for this process.
However, for users that have not logged into the device since the update was performed, it's possible that there are "artifacts" within a user's profile that do not get updated until that user actually logs in. These are purely metadata based artifacts that pose no actual risk. Unfortunately, some security scanners do report false positives because they are keying off of these artifacts instead of the actual binaries.
RyanSteele-CoV, if you have detailed logs or evidence showing anything different, please let me know (you have my e-mail address I believe).
