Join Brian Culp for an in-depth discussion in this video Disable access to the Windows Store, part of Windows 10: Manage Identity.
- [Voiceover] In this lesson, we'll look at the ability to disable access to the Windows Store. And an administrator can certainly do that for an installation on Windows 10. Why might an administrator want to take away the ability to access the Windows Store? Well, there can be several reasons. You can have reasons that have to do with legal compliance, or if the administrator is setting up either a kiosk or a terminal type of a computer, imagine possibly a computer in a hotel lobby or a library, where you don't want people to go in and install Candy Crush or Netflix from the Windows Store, or if you want your enterprise to use only approved applications.
So those are a couple of reasons. There are two methods for disabling access to the Windows Store that you should be familiar with in terms of your exam preparation. One of those is by using Group Policy, and the other one is using the Office 365 Admin Center. Let's start with a look at Group Policy, and how you do it through a Group Policy setting. Now in order to open up the local Group Policy editor, I'm just going to go to the Start menu and I'm going to type in "gpedit.msc." That should open up the Microsoft Common Console Document for the local Group Policy editor.
So once you click on that, it should open up this window. I'm also going to change this at the very bottom, this "extended" view versus "standard" view. I prefer the "standard" view just because it shows me more information about the setting that I'm looking up. So in terms of using the Group Policy editor, in order to disable the Windows Store, this is very recipe-based. So what you're looking for is under "Computer Configuration," you're looking under "Administrative Templates," and then you're looking for "Windows Components." You can give "Windows Components" a click here, and see on the right-hand side, as I hit the "standard" tab again, all of the different groupings of settings that you can configure for "Windows Components." But I'm looking for one in particular, and it's called "App Package Deployment." So I can double click this, or I could have gone to the left-hand side and continued to navigate through my tree structure.
So I'll just give this a double click here, "App Package Deployment," and now here are the individual settings. There's "Allow Deployment Operations," "Allow Development of Windows Store Apps," "Allow Windows App to Share Application Data Between Users," "Allow All Trusted Apps to Install." This is the setting where you will disable access to the Windows Store. If I give this a double click and open it up in its own dialog box, right now the setting is "Not Configured." If I disable it and click on "Apply," now I have just turned off the Windows Store for this computer.
Now sometimes there is one other step to this, and it is to do a Group Policy setting refresh, so the way you would do that is, once again, open up the Start menu, and what we're doing here is we're trying to open up a command prompt, so Start, "cmd," open up a command prompt, and then type in "gpupdate." Now there's some other switches you can use, you can use "/force," but you don't need to.
"Computer Policy update has completed successfully." So that should now disable access to the Windows Store on this particular computer. We can even test it out here. I'm gonna hit the Start menu, start typing in "Store," try to launch the Windows Store, and it's not launching. Now the other possibility you have for disabling access to the Windows Store is to use the Office 365 Admin Center. To access the Office 365 Admin Center, all I have to do is go to "microsoftonline.com." So because I've typed it in before, you can see that I was already on that page.
So now you just enter in your Microsoft account credentials. In this case here, I'm going to use a user named Leslie, and she works at Landon Hotel. Once I enter Leslie's account credentials for the Microsoft account, I'll click on "Sign In," and we're at the Office 365 Admin Center. What I wanna do is go to the upper left-hand side, and there's this little icon that looks like a tic-tac-toe board. Give it a click and then click on this gray "Admin" tile.
And now we're at the Office 365 Admin Center. In fact, we're at the Admin Center Preview. If you wanna go to the old Admin Center, you have this button over here to do that. But what we wanna focus on right now is disabling access to the Windows Store using this tool. And the way you do that is you can expand the navigation menu, you don't have to, of course, if you know exactly what icons mean what. But we'll navigate to "Settings," and then we'll navigate to "Services and add-ins." And then on the right-hand side here, down this list, it's alphabetized, but there should be one of the icons and one of the links for "Store." So "Manage your Store settings." I give it a click, "Let people in your organization go to Office 365 App Store." So it's on by default, and it's a toggle, so all you gotta do is switch it to "off," click on "Save," and your Store settings have been updated.
Windows expert Brian Culp covers app installation and management; the core differences between local, domain, and Microsoft accounts; techniques for authenticating and authorizing accounts; workgroup support; and domain-level authentication options, such as multifactor authentication, Windows Hello, and virtual smart cards.
Note: This course maps to the Manage Identity domain from the Microsoft Exam 70-697: Configuring Windows Devices. Review the exam objectives here.
- Installing and managing Office 365 and Windows Store apps
- Disabling access to Windows Store
- Enabling and performing sideloading
- Sideloading an app with Microsoft Intune
- Supporting local, domain, and Microsoft accounts
- Working with Group Policy
- Supporting workgroups and domains
- Sharing resources in a workgroup
- Configuring multifactor authentication
- Configuring Windows Hello and virtual smart cards