Trusted app installation: Choose if non-Microsoft Store apps can be installed, also known as sideloading.

By default, the OS might allow apps installed from the Microsoft Store to be automatically updated.ĪpplicationManagement/AllowAppStoreAutoUpdate CSP When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users access to the app store.Īuto-update apps from store: Block prevents updates from being automatically installed from the Microsoft Store.

These settings use the ApplicationManagement policy CSP, which also lists the supported Windows editions.Īpp store (mobile only): Block prevents users from accessing the app store on mobile devices. Before you beginĬreate a Windows 10 device restrictions profile.

The policies also apply to users who have an Intune license, and users that sign in to that device. Policies deployed to user groups apply to targeted users.

In a Windows 10 device restrictions profile, most configurable settings are deployed at the device level using device groups. To see the supported editions, refer to the policy CSPs (opens another Microsoft web site). Some settings are only available on specific Windows editions, such as Enterprise.