My goal is to disable the store via MDM policy except for Store for Education and the apps that have been approved. On Intune for Edu I found these three settings:
Block installing apps from the Microsoft Store for Education
Require Microsoft Store for Education apps to be installed from the private store
Block users from installing apps from places other than the Microsoft Store for Education
These settings seem to restrict the Education store rather than the rest which is exact opposite of what I want. Am I missing something here or is there a way to due this in Intune that I am missing?