Disable: 'Allow deployment operations in special profiles' This policy setting allows you to manage the deployment operations of app packages when the user is logged in under special profiles. Deployment operation refers to adding, registering, staging, updating or removing an app package. Special profiles refer to profiles with the following types: mandatory, super-mandatory, temporary or system. Local and roaming profiles are not special profiles. When the user is logged in to a guest account, the profile type is temporary. If you enable this policy setting, the system allows deployment operations when the user is using a special profile. If you disable or do not configure this policy setting, the system blocks deployment operations when the user is using a special profile. Counter Measure: Disable this setting to prevent users from adding, registering, staging, updating or removing an app package while logged in under a special profile. Potential Impact: If you enable this policy setting, the system allows deployment operations when the user is using a special profile. If you disable or do not configure this policy setting, the system blocks deployment operations when the user is using a special profile."

[enable/disable]

(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsApp Package DeploymentAllow deployment operations in special profiles (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsAppxAllowDeploymentInSpecialProfiles