Allow deployment operations in special profilesID: oval:org.secpod.oval:def:35046 | Date: (C)2016-06-10 (M)2023-12-13 |
Class: COMPLIANCE | Family: windows |
This policy setting allows you to manage the deployment of Windows Store apps when the user is signed in using a special profile. Special profiles are the following user profiles, where changes are discarded after the user signs off:
Roaming user profiles to which the "Delete cached copies of roaming profiles" Group Policy setting applies
Mandatory user profiles and super-mandatory profiles, which are created by an administrator
Temporary user profiles, which are created when an error prevents the correct profile from loading
User profiles for the Guest account and members of the Guests group
Counter Measure:
Disable this setting to prevent users from adding, registering, staging, updating or removing an app package while logged in under a special profile.
Potential Impact:
If you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of Windows Store apps when using a special profile.
If you disable or do not configure this policy setting, Group Policy blocks deployment operations of Windows Store apps when using a special profile.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\App Package Deployment\Allow deployment operations in special profiles
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx!AllowDeploymentInSpecialProfiles
Platform: |
Microsoft Windows 10 |