Windows 10: Block MS Store for users while allowing software updates

Hello community,Is there a way to remove the option to install software using MS Store desktop and web from users while keeping the ability to update software installed through MS Store? Intune policy allows either blocking the desktop client while web continues to work, or completely blocks MS Store including the updates. Is there anything that can be done in terms of Intune policy / GPO / registry mods to achieve this? Would blocking the MS Store URL via Defender SmartScreen help theoretically or would it also impact the updates?Thank you.

:)

 

Block ALL Programs Except Allowed Ones

You can block programs using Windows Defender, for example (ignore the strange title): Please Wait... | Cloudflare E.g.

 

Windows Firewall blocks App Store from downloading new apps

Hi,

Let's try to check if the app store you're referring to if it's really blocked by Windows Firewall. See these steps:

• Open Windows Firewall from the taskbar >
  Firewall & network protection > Allow an app through firewall.
• A new window will show up containing the list of the apps that ca be allowed through Firewall.
• Look for the app you want to be accessed, and make sure that the Domain, Private and Public are ticked. That would allow the app store to be accessed.

Let us know what happens after doing the suggestion.

 

Blocking and Allowing a Certain Program to a User in Windows 10

Hello,

Thank you for posting on Microsoft Community. We regret the inconvenience caused and will assist you in resolving the issue.

Before assisting further, I would like to ask you few questions:

• Which option of the operating system are you exactly talking about (it will be easy for us to help you in resolving the issue quickly)?
• Do you want to block the access of files & folders for the other user profile?

You can give permission for accessing/denying the files/folders on a drive to a user profile by setting appropriate permissions on the operating system.

To block the permission of the other user profile to access the files & folders, I suggest you to follow the steps below:

• 
  Press Window logo + E keys on the keyboard and click on
  This PC located on the right hand panel of the screen.
  
• 
  Open the drive where the application files are located.
  
• 
  Right click on the application file and select Properties.
  
• 
  Click on the Security tab of the window and click on the user profile name to deny access to under
  Group or user names.
  
• 
  Click on Edit button and give permissions accordingly to the user profile.
  
• 
  Click on Apply and OK.
  
• 
  Close the window and check if the changes are effective.
  

Write to us with the answers to the above questions and the status of the issue on the same post for further assistance.
Your reply is most important for us to ensure we assist you accordingly.

Thank you.