Allowed package family names for non-admin user install

Policy ID
AllowedNonAdminPackageFamilyNameRules
Scope
Computer Configuration
Supported on
At least Windows 11 Version 22H2
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › App Package Deployment

Description

Allowed package family names for non-Administrator user Windows app package installation.

If you enable this policy, you can enter a list of Windows app packages non-Administrators will be able to initiate installation of regardless of the configured "Prevent non-admin users from installing packaged Windows apps" policy.

The values provided will be treated as regular expressions (ECMA Script). A package family name like Contoso.ContosoApp_8wekyb3d8bbwe is itself a valid regular expression that will match all packages in that family. A regular expression like ^Contoso.*_8wekyb3d8bbwe$ will also match Contoso.ContosoApp_8wekyb3d8bbwe

If the package family name of an installing Windows app package matches any rule it will not be blocked by the "Prevent non-admin users from installing packaged Windows apps" policy. Installation may still be blocked by other policy or settings.

If you disable or do not configure this policy, all Windows app packages will be subject to the configured "Prevent non-admin users from installing packaged Windows apps" policy.

Default is 'disabled' (key not present).

Options

  • Allowed package family names for non-admin user install

Registry

Other policies in the same category

View all policies in this category (16)