Enable Allowed Zones for MSIX Packages

Policy ID: EnableMsixAllowedZones
Scope: Computer Configuration
Supported on: At least Windows 11 Version 24H2
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › App Package Deployment

Description

This policy controls whether MSIX packages originating from specific URL Zones are allowed to install. A package's origin is determined by its URI and whether a Mart-of-the-Web (MotW) is present. If multiple URIs are involved, all of them are considered;

If you enable this policy, users will be able to install MSIX packages according to the configuration for each zone.

If you disable or do not configure this policy, users will be able to install MSIX packages from any zone except for Untrusted.

Options

Local Machine
- Block
- Allow
Intranet
- Block
- Allow
Trusted Sites
- Block
- Allow
Internet
- Block
- Allow
Untrusted Sites
- Block
- Allow

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Microsoft\Windows\Appx\View registry values

EnableMsixAllowedZones-

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones View registry values

LocalMachineREG_DWORD
IntranetREG_DWORD
TrustedSitesREG_DWORD
InternetREG_DWORD
UntrustedSitesREG_DWORD

Other policies in the same category

View all policies in this category (16)