Microsoft App Store
Enterprise
ESM Security Setting - App Store Auto Update Policy
Description: Specifies whether automatic update of apps from Microsoft Store are allowed. Most restricted value is 0.
Why It's Important: This setting helps keep apps up to date with the latest features, bug fixes, and security patches—without requiring users to manually check for updates. It’s like having your phone apps update in the background so you’re always using the safest and most reliable version. Allowing auto-updates reduces the risk of vulnerabilities caused by outdated software and improves overall system stability.
Learn More
Privileged
PSM App Store Settings - Allow apps from the Microsoft app store to auto update
Description: Specifies whether automatic update of apps from Microsoft Store are allowed. Most restricted value is 0.
Why It's Important: [coming soon]
Learn More
PSM App Store Settings - Allow Developer Unlock
Description: Specifies whether developer unlock is allowed. Most restricted value is 0.
Why It's Important: [coming soon]
Learn More
PSM App Store Settings - Allow Game DVR
Description: Specifies whether DVR and broadcasting is allowed. Most restricted value is 0. Note the policy is only enforced in Windows 10 for desktop.
Why It's Important: [coming soon]
Learn More
- ApplicationManagement Policy CSP | Microsoft Learn
PSM App Store Settings - Block Non Admin User Install
Description: Manages non-administrator users' ability to install Windows app packages. If you enable this policy, non-administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.
Why It's Important: [coming soon]
Learn More
PSM App Store Settings - MSI Allow User Control Over Install
Description: This policy setting permits users to change installation options that typically are available only to system administrators. If you enable this policy setting, some of the security features of Windows Installer are bypassed. It permits installations to complete that otherwise would be halted due to a security violation. If you disable or do not configure this policy setting, the security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user. This policy setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed.
Why It's Important: [coming soon]
Learn More
PSM App Store Settings - MSI Always Install With Elevated Privileges
Description: This policy setting permits users to change installation options that typically are available only to system administrators. If you enable this policy setting, some of the security features of Windows Installer are bypassed. It permits installations to complete that otherwise would be halted due to a security violation. If you disable or do not configure this policy setting, the security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user. This policy setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed.
Why It's Important: [coming soon]
Learn More