Policy
Prevent non-admin users from installing packaged Windows apps
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016
Manages non-Administrator users' ability to install Windows app packages. If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow a Windows app to share application data between usersAt least Windows Server 2016, Windows 10
- ComputerAllow all trusted apps to installAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllow deployment operations in special profilesAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllowed package family names for non-admin user installAt least Windows 11 Version 22H2
- ComputerAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)At least Windows Server 2012, Windows 8 or Windows RT
- ComputerArchive infrequently used appsAt least Windows Server 2016, Windows 10
- ComputerDisable installing Windows apps on non-system volumesAt least Windows 8.1 Update 2
- ComputerNot allow per-user unsigned packages to install by default (requires explicitly allow per install)Windows 10 22H2
- ComputerNot allow sideloaded apps to auto-update in the backgroundAt least Windows Server 2016, Windows 10 Version 2106
- ComputerNot allow sideloaded apps to auto-update in the background on a metered networkAt least Windows Server 2016, Windows 10 Version 2106
- ComputerPrevent users' app data from being stored on non-system volumesAt least Windows 8.1 Update 2
- ComputerRemove Default Microsoft Store packages from the system.At least Windows 11 Version 25H2 Enterprise or Windows 11 Version 25H2 Education