Configure access to the Microsoft Store app

• Applies to:

  ✅ Windows 11, ✅ Windows 10

Microsoft Store is a digital distribution platform that provides a way for users to install applications on Windows devices. For some organizations, business policies require blocking access to Microsoft Store.

This article describes how to configure access to the Microsoft Store app in your organization.

Prevent access to the Microsoft Store app

You can use configuration service provider (CSP) or group policy (GPO) settings to configure access to the Microsoft Store app. The CSP configuration is available to Windows Enterprise and Education editions only.

The following instructions provide details about how to configure your devices. Select the option that best suits your needs.

Intune/CSP

To configure devices with Microsoft Intune, create a Settings catalog policy and use the following settings:

Category	Setting name	Value
Administrative Templates > Windows Components > Store	Turn off the Store application	Enabled

Assign the policy to a group that contains as members the devices or users that you want to configure.

Alternatively, you can configure devices using a custom policy with the Policy CSP.

Setting
- OMA-URI: ./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsStore/RemoveWindowsStore_2 - Data type: string - Value: <enabled/>

GPO

To configure a device with group policy, use the Local Group Policy Editor. To configure multiple devices joined to Active Directory, create or edit a group policy object (GPO) and use the following settings:

Group policy path	Group policy setting	Value
Computer Configuration\Administrative Templates\Windows Components\Store	Turn off the Store application	Enabled

Group policies can be linked to domains or organizational units, filtered using security groups, or filtered using WMI filters.

User experience

When you turn off the Microsoft Store application, users get the following message when they open it:

Considerations

Here are some considerations when you prevent access to the Microsoft Store app:

• Microsoft Store applications keep updating automatically, by default
• Users might still be able to install applications using Windows Package Manager (winget), or other methods, if they don't need to acquire the package from Microsoft Store
• Devices managed by Microsoft Intune can still install applications sourced from Microsoft Store, even if you block access to the Microsoft Store app. To learn more, see Add Microsoft Store apps to Microsoft Intune