Issues with Intune Configuration Profile for Disabling Microsoft Store

Zachary Ralph 40 Reputation points
2023-10-20T17:24:33.8166667+00:00

Is there any known conflict between Intune configuration profiles and applying them to Windows 10/11 PCs? I am trying to disable the Microsoft store for non-admin field users to improve our endpoint security. I have already made the profile, tested it on four users, and successfully applied it to their PCs for 24 hours, although only two of them have been applied successfully. I am wondering whether this conflict is related to the "Turn off store application" and "Turn off store application (User)" settings. These PCs also have a registry entry for removing the store, although it appears not to be working on some PCs. Any advice on this or Is there an alternative solution to disabling the store via Intune?

Thanks in advance!! :) image_2023-10-20_122416989

image_2023-10-20_122304381

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
345 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,734 questions
Microsoft Intune Grouping
Microsoft Intune Grouping
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Grouping: The arrangement or formation of people or things in a group or groups.
40 questions
0 comments No comments
{count} votes

Accepted answer
  1. ZhoumingDuan-MSFT 8,295 Reputation points Microsoft Vendor
    2023-10-23T03:03:42.14+00:00

    @Zachary Ralph,Thanks for posting in Q&A.

    From your description, I know that you encountered an issue that disable Micrsoft store policy did not applied to all test machines.

    Based on my testing, I did the same configuration as yours and it can work successfully. If you both configured "Turn off store application" and "Turn off store application (User)" settings, it will only apply to users. However, it is recommended that you configure one of them.

    Please go to the targeted devices to check RemoveWindowsStore value in Registry.

    Location: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore.

    0 means allowing access to Microsoft store, 1 means denying access to Microsoft store. If the RemoveWindowsStore value is 1 and user still can access the store, we suggest that you contact Windows Support to get more help and I will tag Windows on this thread.

    Moreover, there are some alternative soulutions to disable the stroe:

    • Disable Microsoft Store using Local Group Policy Editor

    • Disable Microsoft Store using Registry

    • Disable Microsoft Store using PowerShell

    • Disable Microsoft Store on Windows using Group Policy

    https://www.prajwaldesai.com/enable-disable-microsoft-store-on-windows/#:~:text=Use%20the%20following%20steps%20to%20disable%20Microsoft%20Store,the%20value%20of%20RemoveWindowsStore%20from%200%20to%201.

    Please try above information, if there is any update, feel free to contact me.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful