Prevent non-admin users from installing packaged Windows apps
- Policy ID
- BlockNonAdminUserInstall
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › App Package Deployment
Description
Manages non-Administrator users' ability to install Windows app packages.
If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies.
If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.
Registry
ComputerHKEY_LOCAL_MACHINE
- BlockNonAdminUserInstallREG_DWORD