I'm preparing for my school to switch to Windows 11 24H2 next year (not thrilled about it), and I'm trying to set up group policies to restrict Microsoft Store access while still allowing all the essential UWP apps. Despite my efforts, I've run into issues; the AppLocker policy seems configured correctly to allow all Microsoft published apps but specifically deny the Microsoft Store, yet somehow all UWP apps continue to be blocked.
I recently discovered that our licensing is 'Windows 11 Pro in Education', and I read somewhere that this version doesn't enforce AppLocker for UWP apps. It suggests that to fully utilize UWP AppLocker, we'd need to upgrade to 'Windows 11 Education.' Can someone shed some light on this? I need to clarify this to my supervisor, who believes UWP enforcement should work under our current education license. I'm struggling with two main points:
1. Why isn't the policy functioning as expected? I've double-checked my rules to ensure they're set up properly.
2. Why have different versions of the education license if they supposedly share the same features?
1 Answer
Your confusion is totally understandable! The AppLocker issue you're facing isn't related to your licensing. AppLocker is operational on all Windows 11 editions since September 2022, so it's definitely functioning. The real problem is with your configuration. If all UWP apps are being blocked, that points to a configuration oversight rather than a licensing problem.
Exactly! It sounds like something's off with your rules. If AppLocker is blocking everything, it’s likely due to how your allow and deny rules are structured. You're not alone in this; getting this setup right can be tricky!