Block launching Universal Windows apps with Windows Runtime API access from hosted content.
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
Windows Components > App runtime
Supported on
At least Windows Server 2016, Windows 10

Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016

This policy setting controls whether Universal Windows apps with Windows Runtime API access directly from web content can be launched. If you enable this policy setting, Universal Windows apps which declare Windows Runtime API access in ApplicationContentUriRules section of the manifest cannot be launched; Universal Windows apps which have not declared Windows Runtime API access in the manifest are not affected. If you disable or do not configure this policy setting, all Universal Windows apps can be launched. This policy should not be enabled unless recommended by Microsoft as a security response because it can cause severe app compatibility issues.

Internal name
AppxRuntimeBlockHostedAppAccessWinRT
Policy ID
aa88451bdae7
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Computer
Path
Software\Microsoft\Windows\CurrentVersion\Policies\System
Value name
BlockHostedAppAccessWinRT
REG_DWORD
HKLM
1
HKLM
0
Registry location
Type REG_DWORD · Computer
Path
Software\Microsoft\Windows\CurrentVersion\Policies\System
Value name
BlockHostedAppAccessWinRT
Hive
HKLM
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.