Enable Allowed Zones for MSIX Packages: registry value LocalMachine and 4 more (MsixAllowedZones)ComputerHKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones

Policy ID: EnableMsixAllowedZones
Scope: Computer Configuration
Supported on: At least Windows 11 Version 24H2
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › App Package Deployment

Registry

EnableMsixAllowedZones

-Computer

HKLM\Software\Policies\Microsoft\Windows\Appx\

LocalMachine

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Current key

Enabled value: Depends on the option value
Element: Local Machine

Options
Item	Stored value
Block	0
Allow	1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones]

; Options (use only one)
; Block
"LocalMachine"=dword:00000000
; Allow
"LocalMachine"=dword:00000001

CMD

:: Options (use only one)

:: Block
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "LocalMachine" /t REG_DWORD /d 0 /f
:: Allow
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "LocalMachine" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Force | Out-Null

# Options (use only one)
# Block
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'LocalMachine' -PropertyType DWord -Value 0 -Force | Out-Null
# Allow
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'LocalMachine' -PropertyType DWord -Value 1 -Force | Out-Null

Intranet

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Current key

Enabled value: Depends on the option value
Element: Intranet

Options
Item	Stored value
Block	0
Allow	1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones]

; Options (use only one)
; Block
"Intranet"=dword:00000000
; Allow
"Intranet"=dword:00000001

CMD

:: Options (use only one)

:: Block
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "Intranet" /t REG_DWORD /d 0 /f
:: Allow
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "Intranet" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Force | Out-Null

# Options (use only one)
# Block
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'Intranet' -PropertyType DWord -Value 0 -Force | Out-Null
# Allow
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'Intranet' -PropertyType DWord -Value 1 -Force | Out-Null

TrustedSites

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Current key

Enabled value: Depends on the option value
Element: Trusted Sites

Options
Item	Stored value
Block	0
Allow	1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones]

; Options (use only one)
; Block
"TrustedSites"=dword:00000000
; Allow
"TrustedSites"=dword:00000001

CMD

:: Options (use only one)

:: Block
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "TrustedSites" /t REG_DWORD /d 0 /f
:: Allow
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "TrustedSites" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Force | Out-Null

# Options (use only one)
# Block
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'TrustedSites' -PropertyType DWord -Value 0 -Force | Out-Null
# Allow
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'TrustedSites' -PropertyType DWord -Value 1 -Force | Out-Null

Internet

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Current key

Enabled value: Depends on the option value
Element: Internet

Options
Item	Stored value
Block	0
Allow	1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones]

; Options (use only one)
; Block
"Internet"=dword:00000000
; Allow
"Internet"=dword:00000001

CMD

:: Options (use only one)

:: Block
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "Internet" /t REG_DWORD /d 0 /f
:: Allow
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "Internet" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Force | Out-Null

# Options (use only one)
# Block
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'Internet' -PropertyType DWord -Value 0 -Force | Out-Null
# Allow
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'Internet' -PropertyType DWord -Value 1 -Force | Out-Null

UntrustedSites

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones Current key

Enabled value: Depends on the option value
Element: Untrusted Sites

Options
Item	Stored value
Block	0
Allow	1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones]

; Options (use only one)
; Block
"UntrustedSites"=dword:00000000
; Allow
"UntrustedSites"=dword:00000001

CMD

:: Options (use only one)

:: Block
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "UntrustedSites" /t REG_DWORD /d 0 /f
:: Allow
reg add "HKLM\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones" /v "UntrustedSites" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Force | Out-Null

# Options (use only one)
# Block
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'UntrustedSites' -PropertyType DWord -Value 0 -Force | Out-Null
# Allow
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Appx\MsixAllowedZones' -Name 'UntrustedSites' -PropertyType DWord -Value 1 -Force | Out-Null