Policy
Allow all trusted apps to install
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016
This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed packaged Microsoft Store apps. If you enable this policy setting, you can install any LOB or developer-signed packaged Microsoft Store app (which must be signed with a certificate chain that can be successfully validated by the local computer). If you disable or do not configure this policy setting, you cannot install LOB or developer-signed packaged Microsoft Store apps.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow a Windows app to share application data between usersAt least Windows Server 2016, Windows 10
- ComputerAllow deployment operations in special profilesAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllowed package family names for non-admin user installAt least Windows 11 Version 22H2
- ComputerAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)At least Windows Server 2012, Windows 8 or Windows RT
- ComputerArchive infrequently used appsAt least Windows Server 2016, Windows 10
- ComputerDisable installing Windows apps on non-system volumesAt least Windows 8.1 Update 2
- ComputerNot allow per-user unsigned packages to install by default (requires explicitly allow per install)Windows 10 22H2
- ComputerNot allow sideloaded apps to auto-update in the backgroundAt least Windows Server 2016, Windows 10 Version 2106
- ComputerNot allow sideloaded apps to auto-update in the background on a metered networkAt least Windows Server 2016, Windows 10 Version 2106
- ComputerPrevent non-admin users from installing packaged Windows appsAt least Windows Server 2016, Windows 10
- ComputerPrevent users' app data from being stored on non-system volumesAt least Windows 8.1 Update 2
- ComputerRemove Default Microsoft Store packages from the system.At least Windows 11 Version 25H2 Enterprise or Windows 11 Version 25H2 Education