We have Windows Pro machines and want to control which Store apps users can install. What approaches work without breaking app updates?
How are you managing Microsoft Store access on Windows Pro?
Answers
A straightforward option is to restrict user access to the Store and make approved apps available through Company Portal. That gives users a way to request or install managed apps without opening up the whole catalog.
Check the policy support for your Windows Pro version before rolling it out. The discussion around whether the Store disable policy applies to Pro is mixed, so test it on a representative machine rather than assuming the setting will take effect.
Reply to this answer
If you manage the devices with Intune, you can push Store apps that users need while preventing users from installing them directly. That separates approved app deployment from unrestricted browsing and installs.
Reply to this answer
Be careful about uninstalling or completely disabling the Store. That can interfere with updates for built-in apps. A private-store restriction was suggested as an alternative, but check whether it is supported and useful for your environment before relying on it.
Reply to this answer
Add your answer
Answers are reviewed before publication.
9p~brassleaf_638:
Test both the installation restriction and an approved app deployment on Windows Pro before applying the configuration broadly.