Alexander's Blog

Sharing knowledge with the global IT community since November 1, 2004

Use Group Policy To Manage Settings for Store Apps

/
/
Active Directory

You can use the Group Policy to manage the settings for Microsoft Store apps in Windows 10. There are several settings that can be configured, based on the organization’s requirements. In this article I will point out different areas in Group Policy that give you control over managing the Microsoft Store apps.

Turn Off the Store App

For security and privacy reasons organizations can turn off access to the Microsoft Store app in Group Policy. The setting is available in both User and Computer Configuration areas. For example, User Configuration -> Policies -> Administrative Templates -> Windows Components -> Store -> Turn off the Store application.
Disabling Store App in Windows 10 Using the Group Policy

Disable All Apps from Microsoft Store

In Computer Configuration there is another setting that you may be interested in. It allows you to disable all apps from Microsoft Store. It’s available under Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Store -> Disable all apps from Microsoft Store. This disables all apps that came preinstalled or were downloaded from Microsoft Store. It also disables the Store app. However, this setting is only applies to Enterprise and Education editions of Windows 10.

Disable all Apps from Microsoft Store

Manage App Privacy

You can manage the permissions for various apps using the Group Policy under Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> App Privacy.

Managing App Privacy in Windows 10 Using the Group Policy

These settings correspond to the app permissions that are listed under Windows Settings -> Privacy. They include Location, Camera, Microphone, Notifications, Account info, Contacts, Calendar, Call history, Email, Tasks, Messaging, Radio, Other devices, Background apps, App diagnostics, etc.

Windows 10 Privacy Settings

When you configure the Group Policy, you have the following three options.

  1. User is in Control
  2. Force Allow
  3. Force Deny

By using Force Deny, you can enforce the company policy. For example, organizations can enhance security by preventing the Windows 10 apps from communicating with unpaired wireless devices and restrict employees from changing the settings on their devices.

Force Deny

Thanks for reading my article. If you are interested in IT training & consulting services, please reach out to me. Visit ZubairAlexander.com for information on my professional background.

Copyright © 2019 SeattlePro Enterprises, LLC. All rights reserved.

  • Facebook
  • Twitter
  • Linkedin

Leave a Comment

Your email address will not be published. Required fields are marked *

This div height required for enabling the sticky sidebar