Policy
Enable Allowed Zones for MSIX Packages
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows11
This policy controls whether MSIX packages originating from specific URL Zones are allowed to install. A package's origin is determined by its URI and whether a Mart-of-the-Web (MotW) is present. If multiple URIs are involved, all of them are considered; If you enable this policy, users will be able to install MSIX packages according to the configuration for each zone. If you disable or do not configure this policy, users will be able to install MSIX packages from any zone except for Untrusted.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| Computer | Local Machine ID LocalMachine | enum | Path Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Value name LocalMachine Type REG_DWORD | Options: Block (0), Allow (1) | |
| Computer | Intranet ID Intranet | enum | Path Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Value name Intranet Type REG_DWORD | Options: Block (0), Allow (1) | |
| Computer | Trusted Sites ID TrustedSites | enum | Path Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Value name TrustedSites Type REG_DWORD | Options: Block (0), Allow (1) | |
| Computer | Internet ID Internet | enum | Path Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Value name Internet Type REG_DWORD | Options: Block (0), Allow (1) | |
| Computer | Untrusted Sites ID UntrustedSites | enum | Path Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Value name UntrustedSites Type REG_DWORD | Options: Block (0), Allow (1) |