Share via

Need to block the app store for add ins:

CGXD 0 Reputation points
2026-04-13T07:43:10.24+00:00

Hi,

We are trying to block the Office Store for all users and only allow approved apps. We have managed to block the store in Outlook but can't do the same for other 365 Office apps. We have tried the following:

  • Block unmanaged add-ins via the m365 app policies
  • Turning off the 3 settings in 'Integrated apps' (see screenshot below)
  • User owned apps and services is not in the list of 'Org Settings'

I'm not sure what do try to get users blocked from installing add-ins.

User's image

Thank you in advance.

Microsoft 365 and Office | Install, redeem, activate | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daniel-Vo 5,925 Reputation points Microsoft External Staff Moderator
    2026-04-13T11:26:10.05+00:00

    Hello CGXD,

    If you would like to block the Office Store for all users and allow only approved apps, you can refer to the steps below:

    1/ Disable Office Store via Org Settings

    Go to Microsoft 365 Admin Center > Settings > Org Settings > User owned apps and services > Turn off “Let users access the Office Store”

    User's image

    2/ Use Cloud Policy Service for Office

    Navigate to: config.office.com > Customization >Policy Management

    • Create a new policy and assign it to all users
    • Configure one of the following settings:
      • Block all Office Store, or
      • Disable Office Add-ins

    User's image

    For reference: Manage Add-ins in the Microsoft 365 Admin Center - Microsoft 365 admin | Microsoft Learn

    I hope this information helps. If you have any additional questions, please feel free to let me know.

    If this response resolves your issue, kindly click Accept Answer and consider upvoting. If you need further clarification, please click Comment.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

  2. AI answer

    2026-04-13T07:43:40.46+00:00

    To block the Office Store for all users and only allow approved add-ins, use the central controls for Office add-ins rather than Intune app policies alone.

    1. Use Microsoft 365 admin center for Word/Excel/PowerPoint add-ins
      • In the Microsoft 365 admin center, go to Settings → Org settings → Services → User owned apps and services.
      • Clear Let users access the Office Store.
      • Save the change.
      • This blocks users from accessing Microsoft Marketplace/Office Store and from downloading add-ins for Word, Excel, PowerPoint (desktop, web, Mac, iOS) and non‑subscription Office, so only centrally deployed add-ins remain available.
      If User owned apps and services is not visible, verify that the account has the necessary admin role (for example, Global admin) and that the tenant is not using an alternate admin experience. The setting is the documented control for Marketplace access.
    2. Use Group Policy for domain‑joined Windows devices (optional, for stricter control)
      • Configure Office policy using the Office Deployment Tool and Office Customization Tool.
      • Set the Block the Office Store policy to prevent users from getting or running Office Add-ins that come from Microsoft Marketplace.
      • Optionally also use Block Web Add-ins if all web add-ins should be disabled, and/or adjust Allow Unsecure web add-ins and Catalogs as needed.
    3. Outlook add-ins are separate
      • Outlook add-ins are managed via Exchange, not the Microsoft 365 “Let users access the Office Store” toggle.
      • To prevent users from installing Outlook add-ins, remove the following roles from users in the Exchange admin center:
        • My Marketplace Apps – blocks Office Store add-ins.
        • My Custom Apps – blocks sideloaded add-ins.
        • Remove both to block all Outlook add-ins.
    4. Intune app configuration (iOS Office apps)
      • For Office apps on iOS managed by Intune, configure an app configuration policy and set:
        • com.microsoft.office.OfficeWebAddinDisableOMEXCatalog = 1 to block add-ins from the Office Store only, or
        • com.microsoft.office.OfficeWebAddinDisableAllCatalogs = 1 to block all add-ins (Store and sideloaded).
      • Ensure Word, Excel, and PowerPoint are managed by Intune and have app protection policies applied.

    Combining these:

    • Use User owned apps and services → Let users access the Office Store (and/or the Office GPO “Block the Office Store”) for Word/Excel/PowerPoint.
    • Use Exchange roles (My Marketplace Apps/My Custom Apps) for Outlook.
    • Use Intune app configuration keys for iOS Office apps.

    This results in users being unable to browse or install add-ins themselves, while approved add-ins can still be deployed centrally.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.