Policy
Configure App Install Control
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016
App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly. If you enable this setting, you must choose from the following behaviors: - Turn off app recommendations - Show me app recommendations - Warn me before installing apps from outside the Store - Allow apps from Store only If you disable or don't configure this setting, users will be able to install apps from anywhere, including files downloaded from the Internet.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| Computer | Path Software\Policies\Microsoft\Windows Defender\SmartScreen Value name ConfigureAppInstallControlEnabled | REG_DWORD | HKLM 1 | HKLM 0 |
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| Computer | Pick one of the following settings: ID ConfigureAppInstallControl_Dropdown | enum | Path Software\Policies\Microsoft\Windows Defender\SmartScreen Value name ConfigureAppInstallControl Type REG_SZ | Options: Turn off app recommendations (Anywhere), Show me app recommendations (Recommendations), Warn me before installing apps from outside the Store (PreferStore), Allow apps from Store only (StoreOnly) |