I've encountered an issue where my devices are only allowing installations of apps from the Microsoft Store, and I'm not sure how this restriction got set. This came to light while testing a device using LAPS with a standard user account. I've downgraded my device to standard user and noticed that when I try to install certain applications, I get a notification stating, "The app you're trying to install isn't a Microsoft verified App," which prevents users from downloading what they need since much of our required software isn't available in the Store or through WinGet. I've checked Intune configuration and Conditional Access without success, and I suspect this could be a setting applied at the tenant level. I need a solution to enable installations from any source for all staff members, especially for those operating under standard user accounts due to business requirements.
3 Answers
Have you checked under Intune? Go to Devices, then Configuration profiles, and look for Device restrictions. You want to check the App Store and app installations settings. You should have 'App Install control' set to 'Anywhere'. Also, is the device you're testing on running Windows 11?
Are your devices enrolled in Intune, or are they still getting group policies from a domain controller? You can find out by running 'gpresult /h report.html' in the command prompt.
Do you have any Security Baseline settings enabled? Sometimes these can enforce restrictions on installations. If you're not using the default security baseline, then that might not be the issue.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures