This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 73%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZR%3C/text%3E%3C/svg%3E)
Is there any known conflict between Intune configuration profiles and applying them to Windows 10/11 PCs? I am trying to disable the Microsoft store for non-admin field users to improve our endpoint security. I have already made the profile, tested it on four users, and successfully applied it to their PCs for 24 hours, although only two of them have been applied successfully. I am wondering whether this conflict is related to the "Turn off store application" and "Turn off store application (User)" settings. These PCs also have a registry entry for removing the store, although it appears not to be working on some PCs. Any advice on this or Is there an alternative solution to disabling the store via Intune?
Thanks in advance!! :)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZM%3C/text%3E%3C/svg%3E)
@Zachary Ralph,Thanks for posting in Q&A.
From your description, I know that you encountered an issue that disable Micrsoft store policy did not applied to all test machines.
Based on my testing, I did the same configuration as yours and it can work successfully. If you both configured "Turn off store application" and "Turn off store application (User)" settings, it will only apply to users. However, it is recommended that you configure one of them.
Please go to the targeted devices to check RemoveWindowsStore value in Registry.
Location: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore.
0 means allowing access to Microsoft store, 1 means denying access to Microsoft store. If the RemoveWindowsStore value is 1 and user still can access the store, we suggest that you contact Windows Support to get more help and I will tag Windows on this thread.
Moreover, there are some alternative soulutions to disable the stroe:
• Disable Microsoft Store using Local Group Policy Editor
• Disable Microsoft Store using Registry
• Disable Microsoft Store using PowerShell
• Disable Microsoft Store on Windows using Group Policy
Please try above information, if there is any update, feel free to contact me.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
So im going to try a fresh test, re connect the devices to my domain and try to test it again. I just logged back into a laptop test device after deleting the configuration profile, and it was unblocked as my user( which was in the test group of users to include to block...) and it was blocked logged in as the device admin account. Im so confused. Lol. Weird thing is that it was showing a registry entry key of 0 for disabling the store. It was 1 on another device that was showing blocked though. But i think doing a couple different settings / administrative templates tests has made the results hard to understand which has worked and which hasnt
Also how long do you usually see it takes to implement? Im running a test station with a few devices to see the most efficient way of getting this done within intune, because my manager wants to move away from group policy and scripts as much as possible.
@Zachary Ralph,Thanks for your update.
Based on the article above, the registry key 0 will not disable the store and 1 will disable the store, maybe there are some problems on the registry key 0 device, please restart the device and check whether it is ok. Moreover, the policy will take effect after applied shortly.
Thanks.
The main issue im having is whenever I enable the settings to turn off the store application, whether its user based, both settings or just the store... It makes the registry entry but always sets the default to 0 on my devices leaving it unblocked. Ive seen it set at 1 a couple of times and it has not blocked it either. Just wondering if its possible my PC already sees it as blocked or something and therefor does not apply the settings or profile? I'm unsure as the event viewer isnt giving much help in the MDM logs.
@ZhoumingDuan-MSFT Im also assuming that its a good idea to enable the "Allow apps from the store to auto update" within the same profile to make sure apps get updates still for security purposes?
@Zachary Ralph,Thanks for your reply.
For the policy deployment, it will take some time to get changed and take effect, and it is normal to see the Registry values have not changed, if you want it take effect shortly, you can restart your device to check if it worked.
Moreover, "Allow apps from the store to auto update" will let you get the latest features and improvements of the apps while the Stroe is disabled and enhance the security and stability of the app.
Thanks for your kind understanding.
I have a working store on a Windows 11 PC targetted with the same Intune configuration profiles and the registry shows a 1
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 40%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Hi,
I have the same issue as above, the Windows 11 device has the Intune config with "Turn off the store application" enabled, and the reg value "RemoveWindowsStore" is 1, but the store can still be opened and used to install packages.