Articles on: Installing at school
This article is also available in:

Blocking the Microsoft Store

To prevent students from installing all kinds of apps and games on their laptop themselves, you can disable the Microsoft Store. With Intune this is fairly easy to set up.


In the Intune admin center, go to:


Devices > Windows > Configuration profiles > ➕ Create > ➕ New policy

For Platform, select Windows 10 and later. For Profile type, select Settings catalog and click Create at the bottom.


Give the new profile a name, e.g. "Disable App Store", and click Next at the bottom.


Click + Add settings
Type "store application" in the search bar and click Search.
Click Administrative Templates\Windows Components\Store. 2 results appear; tick both:
✅ Turn off the Store application
✅ Turn off the Store application (User)


Now click the cross at the top right of the Search button.


Then set both toggles to Enabled.


Click Next at the bottom, and click Next again at Scope tags


Under "Included groups", click Add groups and select the student group(s).


Click Next, check the settings and click Create


Intune will now roll out this setting to the student accounts. From now on, these accounts can no longer use the Microsoft Store.

Updated on: 03/11/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!