Use Group Policy To Manage Settings for Store Apps

For security and privacy reasons organizations can turn off access to the Microsoft Store app in Group Policy. The setting is available in both User and Computer Configuration areas. For example, User Configuration -> Policies -> Administrative Templates -> Windows Components -> Store -> Turn off the Store application.

In Computer Configuration there is another setting that you may be interested in. It allows you to disable all apps from Microsoft Store. It's available under Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Store -> Disable all apps from Microsoft Store. This disables all apps that came preinstalled or were downloaded from Microsoft Store. It also disables the Store app. However, this setting is only applies to Enterprise and Education editions of Windows 10.

Manage App Privacy

You can manage the permissions for various apps using the Group Policy under Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> App Privacy. These settings correspond to the app permissions that are listed under Windows Settings -> Privacy. They include Location, Camera, Microphone, Notifications, Account info, Contacts, Calendar, Call history, Email, Tasks, Messaging, Radio, Other devices, Background apps, App diagnostics, etc. When you configure the Group Policy, you have the following three options.

1. User is in Control
2. Force Allow
3. Force Deny

By using Force Deny, you can enforce the company policy. For example, organizations can enhance security by preventing the Windows 10 apps from communicating with unpaired wireless devices and restrict employees from changing the settings on their devices.