I was wondering how other people within a business organization lock down installing from Microsoft store, but allows preinstalled apps to update

Karbashi

4/10/24, 8:06 PM

Our company uses Windows 11 Pro, We currently have it so that nothing can be downloaded from Microsoft store via the GPO

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update

Do not connect to any Windows Update Internet locations

The fear is that by disabling the above GPO, we will open ourselves to systems updating via Microsoft Servers for Windows Updates as well.

I know that Windows Enterprise Edition offers other ways of locking down Microsoft Store, but as I said, we use Windows 11 Pro in our organization.

I was thinking of using Applocker to block users from using Microsoft store... but that will not make up for the fact that we still need to disable the GPO state above that will allow windows update to communicate with microsoft servers.

So, I am wondering what others have done in this situation.

0 + 0

group-policy

windows-11

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: I was wondering how other people within a business organization lock down installing from Microsoft store, but allows preinstalled apps to update

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.