Hey everyone! I'm in the process of upgrading a bunch of systems to Windows 11, but I've hit a snag. The Windows Store was completely removed in our Windows 10 setup, and now I think there are Group Policies (GPOs) still affecting it. Although the Store is included in the Windows 11 image, when I try to install an app, I get an error message saying I need to "Turn on Windows Update" and that it's being blocked by a policy (error code 0x8024500C). Previously, I just got a generic unknown error. I also can't deploy any Store apps via Intune.
I've already disabled the obvious GPO that prevents the Store app, but it feels like there's something else lurking that's hindering app downloads and installations. I've been going through GPOs one by one, which is super time-consuming. Does anyone have suggestions on where else I could look to identify what's blocking these installations?
6 Answers
Keep in mind if you’re using WSUS, you might have policies like "Specify intranet Microsoft update service location" or "Do not connect to any Windows Update Internet locations" configured. Either of these can break the Store functionality.
You might want to try running a `gpresult /h results.html` to see exactly what policies are getting applied. This will give you insights into what might be causing the issue. When we’ve done major upgrades, starting with blank GPOs and adding necessary ones back has worked better for us. This way, it’s easier to pinpoint problems instead of dealing with accumulated settings from the past.
For sure! Also, don’t forget that to see user-specific GPOs, you need to run the `gpresult` command under that user. Otherwise, you might miss some settings.
Did you try the usual Powershell commands to repair or reinstall the Store? Running something like `Get-AppXPackage *WindowsStore* -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)AppXManifest.xml"}` can sometimes help.
Are you using co-management? We faced a similar issue when our previous sysadmin removed the MS Store and other built-in apps during the Windows 10 install due to 'security' reasons. After an AD migration, I had to push out a Windows Installer package to reinstall the Store and other missing apps. It solved our issues, so that could be a route for you too.
It sounds like another GPO or registry setting might be blocking Windows updates, which could affect UWP apps too. Make sure to check both GPO and reg settings for any restrictions on updates.
Disabling the GPO isn't always enough. You might need to reverse the GPO setting. Make sure you flip it back and enable the GPO if it was set to disabled, or whatever the correct value should be.
Thanks! I’ll definitely give that a shot.
Absolutely, that's a solid approach. It's often best to have GPOs organized by task to easily track down what went wrong by isolated changes.