[enterprise practice] Win10 App Store Management

In the daily office of the enterprise, the Windows 10 App Store software is not needed. I hope the office system is cleaner. In enterprise operation and maintenance, we can use group policy to manage Windows 10 Microsoft Store applications. Can be configured according to the requirements of the organization, multiple settings. In this article, make a brief introduction.

1. Close the Store application

For security and privacy reasons, organizations can close the Microsoft Store application in the access group policy. This setting is in the user and computer configuration area.

User Configuration-> Policies-> Administrative Templates-> Windows Components-> Store-> Turn off the Store application.

2. Disable all Microsoft app stores

There is another setting in the computer configuration that allows you to disable all applications from the Microsoft Store. Computer Configuration-> Policies-> Administrative Templates-> Windows Components-> Store-> Disable all apps from Microsoft Store. This policy disables all apps that are pre-installed or downloaded from the Microsoft store.

Note: the settings are only applicable to the enterprise and educational versions of Windows 10.

3. Application privacy configuration

Various application permissions can be configured through group policy

Computer Configuration-> Policies-> Administrative Templates-> Windows Components-> App Privacy

These settings correspond to the applications listed under Windows settings, with the path Windows Settings-> Privacy. Including location, camera, microphone, notification, account information, contact, calendar, call history, email, task, message, etc.

4. When an enterprise applies to configure group policy, you have the following three options.

User-defined configuration

Mandatory permission to execute

Forcibly reject application

In the daily enterprise operation and maintenance, we can enforce the policy of the company. For example, in order to enhance the application rights of Windows 10, authentication of access devices is enforced.