Allow all trusted apps to install

Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed packaged Microsoft Store apps. If you enable this policy setting, you can install any LOB or developer-signed packaged Microsoft Store app (which must be signed with a certificate chain that can be successfully validated by the local computer). If you disable or do not configure this policy setting, you cannot install LOB or developer-signed packaged Microsoft Store apps.

This policy has no additional user input fields.

• Computer
  Allow a Windows app to share application data between users

  At least Windows Server 2016, Windows 10
• Computer
  Allow deployment operations in special profiles

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allowed package family names for non-admin user install

  At least Windows 11 Version 22H2
• Computer
  Allows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Archive infrequently used apps

  At least Windows Server 2016, Windows 10
• Computer
  Disable installing Windows apps on non-system volumes

  At least Windows 8.1 Update 2
• Computer
  Not allow per-user unsigned packages to install by default (requires explicitly allow per install)

  Windows 10 22H2