Prevent non-admin users from installing packaged Windows appsID: oval:org.secpod.oval:def:95652 | Date: (C)2023-12-08 (M)2023-12-08 |
Class: COMPLIANCE | Family: windows |
Manages non-Administrator users' ability to install Windows app packages.
If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies.
If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\App Package Deployment\Prevent non-admin users from installing packaged Windows apps
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx!BlockNonAdminUserInstall
Platform: |
Microsoft Windows 10 |