Prevent non-admin users from installing packaged Windows apps

Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016

Manages non-Administrator users' ability to install Windows app packages. If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.

This policy has no additional user input fields.

• Computer
  Allow a Windows app to share application data between users

  At least Windows Server 2016, Windows 10
• Computer
  Allow all trusted apps to install

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allow deployment operations in special profiles

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allowed package family names for non-admin user install

  At least Windows 11 Version 22H2
• Computer
  Allows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Archive infrequently used apps

  At least Windows Server 2016, Windows 10
• Computer
  Disable installing Windows apps on non-system volumes

  At least Windows 8.1 Update 2