Not allow per-user unsigned packages to install by default (requires explicitly allow per install)
- Policy ID
- DisablePerUserUnsignedPackagesByDefault
- Scope
- Computer Configuration
- Supported on
- -
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › App Package Deployment
Description
Not allow per-user unsigned packages to install by default (requires explicitly allow per install)
If you enable this policy, the AllowUnsigned option defaults to 'false'.
If you disable this policy, the AllowUnsigned option defaults to 'true'.
Default is 'disabled' (key not present).
Registry
ComputerHKEY_LOCAL_MACHINE
- DisablePerUserUnsignedPackagesByDefaultREG_DWORD