Others

How to Block Microsoft Store on Managed Windows Devices

Kushani Nimanthika Oct 16, 2026 868 views

Question details

Administrators need a way to block or restrict user access to the Microsoft Store on company-managed devices.

How to Block Microsoft Store on Managed Windows Devices

Product: Windows / Microsoft 365
Device & OS: Windows
Scenario: Securing an enterprise environment to prevent users from downloading unauthorized applications.
Observed behavior: Microsoft 365 lacks a dedicated policy for blocking the Microsoft Store, requiring administrators to use native Windows OS management tools instead.

Before you start

Ensure you have administrative privileges (Local Admin, Domain Admin, or Intune Administrator) on the devices you intend to manage.

Solution 1Recommended

Use Group Policy to Disable the Microsoft Store

Group Policy is the recommended and most straightforward method for domain-joined Windows Pro and Enterprise devices.

This method applies a machine-wide or user-wide restriction, completely disabling the Store application interface for the targeted users.

Open Group Policy Editor

Press Windows + R, type 'gpedit.msc', and press Enter to open the Local Group Policy Editor.

Navigate to the Store policies

Go to Computer Configuration > Administrative Templates > Windows Components > Store.

Enable the block policy

Locate the 'Turn off the Store application' policy on the right pane. Double-click it, select 'Enabled', click 'Apply', and then click 'OK'.

Update Group Policy

Open Command Prompt as an administrator and run 'gpupdate /force' to apply the changes immediately.

Use Group Policy to Disable the Microsoft Store

Policy Application: Once applied, users attempting to open the Microsoft Store will receive a message stating that the app has been blocked by their system administrator.

Solution 2

Restrict Access Using AppLocker

AppLocker allows administrators to create specific rules to block the Microsoft Store application package from running.

Free Microsoft Office alternative

Deploy WPS Office as Your Standard Enterprise Suite

While configuring your managed Windows devices, consider deploying a lightweight, cost-effective productivity tool. WPS Office provides exceptional compatibility with Microsoft formats, minimizing deployment friction and reducing licensing costs.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx)Lightweight installation package ideal for managed enterprise endpointsFree alternative to costly Microsoft 365 enterprise subscriptionsFamiliar user interface requiring zero training for smooth migration

microsoft office alternative - wps office

Frequently Asked Questions

Why isn't there a direct Microsoft 365 policy to block the Store?

Microsoft 365 policies primarily focus on managing Office applications and cloud services. Operating system-level restrictions, such as blocking the native Microsoft Store, are handled via Windows security tools like Group Policy or Intune MDM.

Does blocking the Microsoft Store prevent installed apps from updating?

Yes, using the 'Turn off the Store application' Group Policy may also prevent Universal Windows Platform (UWP) apps from automatically updating. Review Microsoft's official guidance on managing app updates in an enterprise environment before deploying this policy.

Can I block the Microsoft Store on Windows Home editions?

No, Group Policy and AppLocker are enterprise management features restricted to Windows Pro, Enterprise, and Education editions. Home editions do not natively support these advanced management policies.

Office Quick Solutions