Policy
Allowed package family names for non-admin user install
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows11
Allowed package family names for non-Administrator user Windows app package installation. If you enable this policy, you can enter a list of Windows app packages non-Administrators will be able to initiate installation of regardless of the configured "Prevent non-admin users from installing packaged Windows apps" policy. The values provided will be treated as regular expressions (ECMA Script). A package family name like Contoso.ContosoApp_8wekyb3d8bbwe is itself a valid regular expression that will match all packages in that family. A regular expression like ^Contoso.*_8wekyb3d8bbwe$ will also match Contoso.ContosoApp_8wekyb3d8bbwe If the package family name of an installing Windows app package matches any rule it will not be blocked by the "Prevent non-admin users from installing packaged Windows apps" policy. Installation may still be blocked by other policy or settings. If you disable or do not configure this policy, all Windows app packages will be subject to the configured "Prevent non-admin users from installing packaged Windows apps" policy. Default is 'disabled' (key not present).
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Allowed package family names for non-admin user install ID AllowedNonAdminPackageFamilyNameRulesList | list | None | List: additive |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow a Windows app to share application data between usersAt least Windows Server 2016, Windows 10
- ComputerAllow all trusted apps to installAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllow deployment operations in special profilesAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)At least Windows Server 2012, Windows 8 or Windows RT
- ComputerArchive infrequently used appsAt least Windows Server 2016, Windows 10
- ComputerDisable installing Windows apps on non-system volumesAt least Windows 8.1 Update 2
- ComputerNot allow per-user unsigned packages to install by default (requires explicitly allow per install)Windows 10 22H2
- ComputerNot allow sideloaded apps to auto-update in the backgroundAt least Windows Server 2016, Windows 10 Version 2106
- ComputerNot allow sideloaded apps to auto-update in the background on a metered networkAt least Windows Server 2016, Windows 10 Version 2106
- ComputerPrevent non-admin users from installing packaged Windows appsAt least Windows Server 2016, Windows 10
- ComputerPrevent users' app data from being stored on non-system volumesAt least Windows 8.1 Update 2
- ComputerRemove Default Microsoft Store packages from the system.At least Windows 11 Version 25H2 Enterprise or Windows 11 Version 25H2 Education