Preventing Installing Microsoft Store Apps for Child Accounts

Question

I've researched this pretty thoroughly and there are several posts already about it. The other posts I think are pretty clear about what they're trying to achieve but it seems that the responses don't understand the current Windows ecosystem and tools available (ex: differences between Windows Home and Pro Editions vs. Enterprise, and the ability to use AppLocker or Group Policy to prevent installs from the store).

I have used two leading parental monitoring applications for my 6 year old son but neither prevents installs from the Microsoft store.

Let me summarize the issue and what I have found:

• My child has the ability to download and install free apps/games/etc from the Microsoft Store and I (and others who have posted) want this turned off. My child is under Microsoft Family Link and I manage his account that way.
• My children need computer access for distance learning for school.
• To be clear: my child will go under his heavily locked down account and still be able to install games and play them. We don't want this at all. It turns into an issue because it alters his behavior, making him irritable and prone to tantrums when he has to stop.
• I think everyone knows the difference between and Administrator and Standard account and that a Standard account can't install software. Let's be clear, though: even with a Standard account you can install software from the Microsoft Store.
• You can prevent a child from viewing age inappropriate apps down to 3 years old, but what I and others want is to completely turn off or completely turn on the ability to authorize/approve ALL installs from the Store.
• The ability to use AppLocker, Registry edits, or Group Policy to disable the store is not something allowed in Windows 10 Home or Pro. You can do so in Enterprise and Education editions, I believe, but this isn't much good for everyday folks. Yesterday, for example, I went to Best Buy and the Windows machines all seemed to be running Windows 10 Home. I run Windows 10 Pro on my current machine but Microsoft changed their approach a few years ago so things like using Group Policy to block the Store do not work. Even if you could disable the store that apparently prevents updates from installed apps. This is a security risk.
• What I and others want is a way, like Apple and Google, to have any and all store app installs approved by parents! Microsoft Family Link does not currently have this functionality. Please don't say you can block individual apps through Family Link. I know this, but it doesn't solve the issue. I can't play a game of whack-a-mole after the installation. Prevent installations without permission before installation!

So, my question:

• If there is a way to prevent or to require approval for all applications/games/etc from the Microsoft Store on a Windows 10 Home or Pro OS machine, please advise. I would like to approve installs but I will take just turning the store off. There are only a handful of reasons/applications/sites that my 6 year old has any need to visit or use.

I purchased a Chromebook 2 weeks ago for the first time for my older child and it works exactly as I would like from an app install perspective - I have to approve any installation, along with having other handy parental controls. I have just purchased a second one for my 6 year old child due to the parental controls Google offers. I looked heavily at Windows laptops but could not get over the issue I've outlined above so went with another Chromebook. However, I still have our home desktop which is running Windows and where this is still an issue. 

Thanks!

Answer 1

I was at my wit's end but just discovered you can block the Microsoft Store app (and any other app for that matter) through the family section of your online Microsoft account.

From your account, select "Family". Under the child user in question, select "App and game limits". Here you can pick which apps to block. I blocked the Microsoft Store app.

Answer 2

This is a great question.  We want to ability to block ALL downloads, costing money OR NOT, from the Microsoft Store.

My child is doing distance learning. I just received a notification that he downloaded a "free" app from the Microsoft Store - VPN something. I have NO IDEA if it is a virus, or what.  It just dawned upon me what a security loophole this is on an otherwise fine Family monitoring system. 

Microsoft, please fix this huge, huge gaping security hole right away.

Answer 3

We powered through stay at home distance learning this spring. It was hard to say the least, keeping children on their intended track. Now, with COVID-19, many school districts plan to continue Fall with online form of education. Inability to control apps installed and used directly interferes with kids' education and parents' sanity.  This needs to be addressed by Microsoft. 

Thanks!

Answer 4

No this doesn't work. It blocks the 'Windows Store' app but does not stop direct downloads from the website. It does give you the option to block the URL "microsoft.com/store/apps" but this is no good as the UK store URL is "www.microsoft.com/en-gb/store" but also a lot of apps seem to have direct URLs which don't match this. Example is Minecraft below:

https://www.microsoft.com/en-gb/p/minecraft-for-windows-10/9nblggh2jhxj

Navigating here will take you directly to the an install/download page which bypasses all restrictions set, even if you try and block the store. Also, there seems to be something which prevents you from blocking any URL beginning with "microsoft.com" in the Content Restrictions/Web Browsing section. If you try and block the URL above, it just doesn't work.

Because of this, I am in the same position - I have no way to stop my son downloading Minecraft.

People may ask why I don't just put limits on/block the Minecraft app in this case. Well, that's a bit of a different issue - but he has worked out that if he launches Minecraft by searching for it in Cortana Search bar, it again just completely bypasses any App limits set.

Finding the parental controls very poor - Screentime works but the App Limits don't. The photo below explains it all - 2 hour limits set but then I find he's been on Minecraft for nearly 5 hours !!

Wish Microsoft would properly fix this. If someone points me to the support page which just suggests I remove and re-add his account to the PC I'll go crazy!!!

Answer 5

I seem to find a solution to this problem, came here to share it.  It looks like LL_VA, who posted this question initially, is also on a similar track. 

In short - drop Microsoft and go with Google OS. 

I was using a combination of Standard MS accounts, Norton family, Circle Disney, but nothing works vs kids installing VPN and/or programs (exe. files) into newly created, "Program Folder" in their downloads. Downloading MS store games is just a breeze for them. So, I was fixated on how to firewall from installing ANY exe. file. The solution is simple - go with Chrome OS, which by design doesn't allow any external exe. files. I borrowed two chromebooks from school and those seem to do their job, except being tiny (11 inch screen) and quite laggy due to oldish hardware. Will be on a lookout to buy 2 new Chromebooks with larger screens (14-15 inch), good wireless network card, and CPU this coming Thanksgiving. 

My older child's 1yo top-notch laptop will be transferred to my spouse, who needs a replacement. Both kids will be handed big screen fasty Chromebooks, which are more manageable for parent controls. 

Chrome OS as of 2019 had 60% of education purposes market share, when those kids grow up, they will continue with familiar environment.

Cheers!