Mar 25 2021 05:22 PM
Mar 25 2021 05:22 PM
Hi Tech Community,
I am currently trying to find a way to lock down the Microsoft Store on our enterprise devices running Windows 10.
I am aware that we can redirect our users to use a curated business store, but there is no stop for a user to log onto a personal account and using the store to download and install any other application.
Any insights are greatly appreciated,
Thanks in advance!!
Mar 26 2021 12:37 AM - edited Mar 26 2021 12:38 AM
You can either disable the Microsoft Store completely, or use the Windows Store for Business only. If you want to do the later, first make sure you configured the Business Store to your liking and then disable the public store either with GPO or Intune:
Computer Configuration > Administrative Templates > Windows Components > Store > Only Display The Private Store within the Microsoft Store
Mar 26 2021 06:55 AM
Jul 14 2022 02:25 AM
Jul 14 2022 11:05 PM
Jul 15 2022 12:52 AM
@Rudy_Ooms_MVP Blocking the store completely isn't an option due to the amount of Windows functionality that would never update if you did, and some manufacturers are delivering drivers and support software through the store, e.g. it seems to be the only way to get the Waves MaxxAudio driver. No Store = no audio functionality on your machine :(
It's a shame Microsoft have made such a mess of being able to manage it, this stuff has been possible on other platforms for a very long time, and was possible on Windows until fairly recently. It's bizarre that any product manager would think the current situation is acceptable for a release product used in business (i.e Windows Pro/Enterprise).
Jul 18 2022 11:07 PM
Jul 19 2022 12:36 AM
Oct 14 2022 11:35 AM
Oct 15 2022 10:01 AM
May 15 2023 05:04 AM
@Rudy_Ooms_MVP Hmm, yeah not sure what I had been reading... I was on a bit of a rant about how annoying the situation is/was - apologies for that
Also, have you seen the interesting (but sadly [hilariously] broken) new Store "integration" with AppLocker since Store version 22303.1401.5.0? Could be really good if they hadn't messed up the version checking...
Jul 04 2023 09:15 AM
Nov 28 2023 04:59 AM - edited Nov 28 2023 04:59 AM
I understand it is an old topic, but here's is an updated information on the query:
The best way is to use a Settings Catalog policy "Turn off store application". It still allows you to Install Store Apps from the Company Portal App. Refer to this blog post, for more detailed information about this subject: https://cloudinfra.net/how-to-disable-microsoft-store-in-windows-using-intune/