Policy

Prevent non-admin users from installing packaged Windows apps

Manages non-Administrator users' ability to install Windows app packages. If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.

Policy
Pack Microsoft Windows
Category Windows Components / App Package Deployment
Policy ID c985bc8b7a94
Internal name BlockNonAdminUserInstall

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall (disabled) = 0

Policy notes

Manages non-Administrator users' ability to install Windows app packages. If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies. If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.

Related policies

Allow a Windows app to share application data between usersAllow all trusted apps to installAllow deployment operations in special profilesAllowed package family names for non-admin user installAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)Archive infrequently used appsDisable installing Windows apps on non-system volumes