Policy
Configure App Install Control
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016
App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly. If you enable this setting, you must choose from the following behaviors: - Turn off app recommendations - Show me app recommendations - Warn me before installing apps from outside the Store - Allow apps from Store only If you disable or don't configure this setting, users will be able to install apps from anywhere, including files downloaded from the Internet.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen\ConfigureAppInstallControlEnabled | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Pick one of the following settings: ID ConfigureAppInstallControl_Dropdown | enum | HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen\ConfigureAppInstallControl Type REG_SZ | Options: Turn off app recommendations (Anywhere), Show me app recommendations (Recommendations), Warn me before installing apps from outside the Store (PreferStore), Allow apps from Store only (StoreOnly) |
Other policies in this category
Explore related policies at the same level.