Problem with unlocking STORE by GPO.

Karol Cichoński 1 Reputation point
2021-03-11T10:44:35.927+00:00

Hello. I have a problem unlocking Microsoft Store from a domain controller. In GPO, I set the Default Domain Policy to Computer Configuration - Policies - Administrative Templates - Windows Components / Store - Disable all apps from Windows Store: Enabled. And in User Configuration - Policies - Administrative Templates - Windows Components / Store - Disable all apps from Windows Store: Enabled. I run gpupdate / force on the client and the Microsoft Store is still blocked by the administrator. Domain controllers work in the forest on Windows Server 2016, Windows Server 2012 R2, and computers connecting to the domain on Windows 10 Pro. Where and how should I look for the cause of the problem?

76744-2021-03-11-11h41-02.png

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,740 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,116 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,846 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Hauck, Oliver 1 Reputation point
    2021-03-11T10:53:52.337+00:00

    As a start I would run rsop.msc or gpresult /h c:\gpresult.htm on the client to verify whether there is possibly yet another GPO that overwrites the settings.
    Besides, when you set these two settings to "enabled" like you described, you actually disable the STORE. However, your screenshot shows the correct settings to enable the STORE...

    best regards
    Oliver

    0 comments
  2. Karol Cichoński 1 Reputation point
    2021-03-11T11:05:08.427+00:00

    76773-2021-03-11-11h57-31.png

    Both options in local settings are set to disabled. Of course, in the native Polish language.

    0 comments
  3. Karol Cichoński 1 Reputation point
    2021-03-11T11:05:57.747+00:00

    This is the result of using gpresult /H.

    0 comments
  4. Fan Fan 15,291 Reputation points Microsoft Vendor
    2021-03-12T02:47:48.29+00:00

    Hi,

    Based on my research ,if you want to use the windows store in the computer, the policy: Disable all apps from Windows Store should be configured to Enabled

    In your gpresult output , the policy was set the disabled , so the store was still blocked by the policy.

    Check the gpresult and find the GPO on which you disabled the policy ,and change it to enabled.
    77011-3124.jpg

    Best Regards,