Policy
Not allow per-user unsigned packages to install by default (requires explicitly allow per install)
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10
Not allow per-user unsigned packages to install by default (requires explicitly allow per install) If you enable this policy, the AllowUnsigned option defaults to 'false'. If you disable this policy, the AllowUnsigned option defaults to 'true'. Default is 'disabled' (key not present).
Internal name
DisablePerUserUnsignedPackagesByDefault
Policy ID
3e56c5acdd61
Elements
0
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\Appx\DisablePerUserUnsignedPackagesByDefault | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow a Windows app to share application data between usersAt least Windows Server 2016, Windows 10
- ComputerAllow all trusted apps to installAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllow deployment operations in special profilesAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllowed package family names for non-admin user installAt least Windows 11 Version 22H2
- ComputerAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)At least Windows Server 2012, Windows 8 or Windows RT
- ComputerArchive infrequently used appsAt least Windows Server 2016, Windows 10
- ComputerDisable installing Windows apps on non-system volumesAt least Windows 8.1 Update 2
- ComputerNot allow sideloaded apps to auto-update in the backgroundAt least Windows Server 2016, Windows 10 Version 2106
- ComputerNot allow sideloaded apps to auto-update in the background on a metered networkAt least Windows Server 2016, Windows 10 Version 2106
- ComputerPrevent non-admin users from installing packaged Windows appsAt least Windows Server 2016, Windows 10
- ComputerPrevent users' app data from being stored on non-system volumesAt least Windows 8.1 Update 2
- ComputerRemove Default Microsoft Store packages from the system.At least Windows 11 Version 25H2 Enterprise or Windows 11 Version 25H2 Education