Windows 10 Pro - turn off Microsoft Store

[bewlay51]

Hi,

Is it possible to turn off the Microsoft Store on Win10 Pro. I have set the GPO as follws

 

USER CONFIGURATION > ADMINISTRATIVE TEMPLATES > WINDOWS COMPONENTS > STORE.

Set TURN OFF THE STORE APPLICATION.

 

https://www.urtech.ca/2015/09/solved-how-to-disable-the-store-app-in-windows-10/

 

But students still have access and appear to be able to download items. Also, is there a URL to the store I can block.

 

Many thanks,

John

[CHiLL]

Take a look at AppLocker to prevent users from running UWP apps.

 

Note: Do this on a test OU first

 

Computer Configuration > Windows Settings > Application Control Policies > AppLocker

 

Right click AppLocker and select properties. Tick Configured under Packaged app Rules

 

Create a basic rule with the following:

Action: Allow

User: Everyone

Name: Signed by *

 

Then if you're editing the GPO on the same OS version that you're deploying, you can:

Right click Packages

Select Automatically Generate Rules

Follow the wizard and change any settings as necessary, such as changing the User to your All Students security group (ensure you leave the Action rule as Allow)

 

Go through the imported list and toggle all those you want to disable to: Action: Deny

 

This requires a bunch of testing because some apps may run automatically every now and again in the user's context. If it does and it's blocked by AppLocker, the user will receive a popup saying that the app has been blocked by their administrator.

[NicholasEsping]

I believe that policy will only work with Windows 10 enterprise or education. With Pro Microsoft decided to take away a lot of the useful GPO settings. Applocker also will not work with Windows 10 Pro see this article here https://social.technet.microsoft.com/Forums/en-US/5fe97abe-dcfa-4349-ad0d-8a647acfc331/applocker-in-windows-10-pro-1803-does-not-seem-to-work?forum=win10itprosecurity

 

Your best bet is going to be an upgrade to enterprise or education if you want to make use out of all of the Group Policy settings.

[bewlay51]

Thank you everyone for your comments and help - I need to have a re-think.

[slears]

I use Impero to block the Microsoft Store for students by blocking the .exe from loading, maybe worth a try if you are running it?

[Bionic]

I now use Applocker to block pupil access to the Microsoft Store, but I used to just block the .exe using AB Tutor.