I'm currently working on setting up group policies for a school that will be moving to Windows 11 24H2 next year. We're trying to restrict access to the Microsoft Store while still allowing all the essential UWP apps. I believe I set up AppLocker correctly to allow Microsoft published apps but deny the Store itself. However, the UWP apps seem to be blocked regardless.
My main concern is whether our licensing could be the problem. We have "Windows 11 Pro in Education," but I've read that this edition doesn't enforce AppLocker for UWP apps based on certain sources. To fully utilize UWP AppLocker enforcement, I think we need to upgrade to "Windows 11 Education." I'm trying to clarify a couple of points for my supervisor who's in charge of licensing:
1. If we're using the correct AppLocker policies, why are the UWP apps still blocked? I thought I set the rules correctly.
2. Why do different education license versions exist if they supposedly all allow the same features?
1 Answer
Hey there! Based on what you've shared, it looks like you're on the right track with AppLocker. Since September 2022, AppLocker should work across all Windows 11 editions, including yours. If UWP apps are being blocked, it’s likely a configuration issue rather than a licensing one. Check your deny rules and make sure they’re set up correctly.
Thanks for clarifying! That makes sense, but I still feel lost on the configuration part. Maybe I should double-check the publisher info in the deny rules? It seems like it might be conflicting with the allow rule.