Prevent non-admin users from installing packaged Windows apps

Policy ID
BlockNonAdminUserInstall
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › App Package Deployment

Description

Manages non-Administrator users' ability to install Windows app packages.

If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies.

If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.

Registry

ComputerHKEY_LOCAL_MACHINE
  • BlockNonAdminUserInstallREG_DWORD

Other policies in the same category

View all policies in this category (16)