Hey everyone! With Microsoft really pushing for the use of the Microsoft Store for app updates and other Windows components, I'm trying to figure out the best way to manage this situation in our organization. Currently, we have a Group Policy Object (GPO) that completely disables the store. However, we're running into problems: some users are getting errors when trying to update apps, and there are also quite a few who genuinely need access to the store for certain applications.
I initially thought about manually installing the necessary apps using an appx package through SCCM or Intune, but with around 2,500 users, it's becoming overwhelming—everyone is requesting different apps like Whiteboard and various project management tools.
I'd love to hear how others handle the Microsoft Store in their environments. Any advice would be greatly appreciated!
1 Answer
Instead of completely disabling the store, consider using a policy that allows apps to update while still controlling user access. It’s a more balanced approach, and it’ll help manage updates for necessary apps.

That policy sounds similar to the RequirePrivateStoreOnly CSP. You might also want to add the AllowAppStoreAutoUpdate policy to ensure everything updates smoothly.