This policy setting allows you to manage installing Windows apps on additional volumes such as secondary partitions, USB drives, or SD cards. If you enable this setting, you can't move or install Windows apps on volumes that are not the system volume. If you disable or do not configure this setting, you can move or install Windows apps on other volumes. Counter Measure: Enable and configure this setting. Potential Impact: Users cannot move or install Windows apps on volumes that are not the system volume. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\App Package Deployment\Disable installing Windows apps on non-system volumes (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx!RestrictAppToSystemVolume