How to Use AppLocker to Block Microsoft Store Apps from Running in Windows 10


AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.

Packaged apps are also known as Universal Windows Platform (UWP) apps from the Microsoft Store or already included with Windows 10.

See also:

This tutorial will show you how to use AppLocker to block specified Microsoft Store apps from running for all or specific users and groups in Windows 10 Enterprise and Windows 10 Education.

You must be signed in as an administrator to use AppLocker.


EXAMPLE: "This app has been blocked by your system administrator" message when any user opens a blocked app
Name:  This_app_has_been_blocked_by_your_system_administrator.jpg
Views: 202
Size:  23.7 KB



Here's How:

1. Open an elevated command prompt.

2. Copy and paste the command below into the elevated command prompt, press Enter, and close the elevated command prompt when it has finished. (see screenshot below)

This command is to make sure the Application Identity service is enabled, set to Automatic, and running. AppLocker cannot enforce rules if this service is not running.

sc config "AppIDSvc" start=auto & net start "AppIDSvc"

Name:  Block_Microsoft_Store_app_in_AppLocker-1.png
Views: 239
Size:  13.1 KB

3. Open Local Security Policy (secpol.msc).

4. Expand open Application Control Policies in the left pane of the Local Security Policy window, click/tap on AppLocker, and click/tap on the Configure rule enforcement link on the right side. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-2.jpg
Views: 218
Size:  84.9 KB

5. Check the Configured box under Packaged app Rules, and click/tap on OK. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-3.png
Views: 197
Size:  24.8 KB

6. Expand open AppLocker in the left pane of the Local Security Policy window, right click or press and hold on Packaged app Rules, and click/tap on Create Default Rules. (see screenshots below)

If this step is not done, AppLocker will block all Microsoft Store apps from running.

Name:  Block_Microsoft_Store_app_in_AppLocker-4.jpg
Views: 204
Size:  59.3 KB Name:  Block_Microsoft_Store_app_in_AppLocker-5.jpg
Views: 203
Size:  57.4 KB

7. Right click or press and hold on Packaged app Rules, and click/tap on Create New Rule. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-6.jpg
Views: 204
Size:  62.0 KB

8. Click/tap on Next. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-7.jpg
Views: 201
Size:  62.5 KB

9. If you would like to specify a user or group to enforce this rule on, click/tap on Select. (see screenshot below)

The default setting is Everyone for all users and groups.

Name:  Block_Microsoft_Store_app_in_AppLocker-a.jpg
Views: 108
Size:  49.1 KB

A) Click/tap on the Advanced button. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-b.png
Views: 109
Size:  17.5 KB

B) Click/tap on the Find Now button. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-c.png
Views: 109
Size:  26.8 KB

C) Select a user or group you want, and click/tap on OK. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-d.jpg
Views: 109
Size:  78.1 KB

D) Click/tap on OK. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-e.png
Views: 108
Size:  19.3 KB

10. Select (dot) Deny, and click/tap on Next. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-8.jpg
Views: 200
Size:  51.5 KB

11. Select (dot) Use an installed packaged app as a reference, and click/tap on Select. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-9.jpg
Views: 200
Size:  69.0 KB

12. Check an app (ex: "Your Phone") you want to block, and click/tap on OK. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-10.jpg
Views: 198
Size:  158.0 KB

13. Click/tap on Next. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-11.jpg
Views: 196
Size:  76.8 KB

14. Click/tap on Next. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-12.jpg
Views: 196
Size:  57.4 KB

15. Click/tap on Create. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-13.jpg
Views: 188
Size:  45.7 KB

16. Your new rule for "Packaged app Rules" will now be created. (see screenshot below)

Name:  Block_Microsoft_Store_app_in_AppLocker-14.jpg
Views: 193
Size:  48.1 KB

17. Repeat steps 7 to 16 if you would like to create another new rule to block a different Microsoft Store app (aka: packaged app) for a user or group.

18. When finished, you can close the Local Security Policy window.


That's it,
Shawn