Policy

Allow all trusted apps to install

This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed packaged Microsoft Store apps. If you enable this policy setting, you can install any LOB or developer-signed packaged Microsoft Store app (which must be signed with a certificate chain that can be successfully validated by the local computer). If you disable or do not configure this policy setting, you cannot install LOB or developer-signed packaged Microsoft Store apps.

Policy
Pack Microsoft Windows
Category Windows Components / App Package Deployment
Policy ID da5117edbee8
Internal name AppxDeploymentAllowAllTrustedApps

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps (disabled) = 0

Policy notes

This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed packaged Microsoft Store apps. If you enable this policy setting, you can install any LOB or developer-signed packaged Microsoft Store app (which must be signed with a certificate chain that can be successfully validated by the local computer). If you disable or do not configure this policy setting, you cannot install LOB or developer-signed packaged Microsoft Store apps.

Related policies

Allow a Windows app to share application data between usersAllow deployment operations in special profilesAllowed package family names for non-admin user installAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)Archive infrequently used appsDisable installing Windows apps on non-system volumesNot allow per-user unsigned packages to install by default (requires explicitly allow per install)