Block MS Store for users while allowing software updates

Question

Hello community,

Is there a way to remove the option to install software using MS Store (desktop and web) for users while keeping the ability to update software installed through MS Store? Intune policy allows either blocking the desktop client while web continues to work, or allows blocking MS Store entirely including the updates. Is there anything that can be done in terms of Intune policy / GPO / registry mods to achieve this? We've tried to utilise Defender SmartScreen but it also blocked the update channel.

Thank you.

Answer 1

@Rybanský René, Thanks for posting in Q&A. Based on my researching, I find there's a setting named "Turn off the Store application" which can deny access to store application. And there's also a setting named "Allow apps from the Microsoft app store to auto-update" which can allow store application auto update. Here is a link with more details for your reference:

https://cloudinfra.net/how-to-disable-microsoft-store-in-windows-using-intune/#:~:text=Here%20are%20the%20steps%20to%20do%20it%3A%201,and%20later.%204%20Profile%20type%20%3A%20Settings%20Catalog.

Note: non-Microsoft link, just for the reference.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.