
Shared user app data: Choose Allow to share application data between different users on the same device and with other instances of that app. Allow: Allows developer mode and sideloading apps.Įnable your device for development has more information on this feature.ĪpplicationManagement/AllowAllTrustedApps CSP.Block: Prevents developer mode and sideloading apps.Non-Microsoft Store apps can be installed.ĭeveloper unlock: Allow Windows developer settings, such as allowing sideloaded apps to be modified by users. Non-Microsoft Store apps can't be installed. Not configured (default): Intune doesn't change or update this setting.For example, an app that is internal to your company only. Sideloading is installing, and then running or testing an app that isn't certified by the Microsoft Store. Trusted app installation: Choose if non-Microsoft Store apps can be installed, also known as sideloading. By default, the OS might allow apps installed from the Microsoft Store to be automatically updated.ĪpplicationManagement/AllowAppStoreAutoUpdate CSP When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users access to the app store.Īuto-update apps from store: Block prevents updates from being automatically installed from the Microsoft Store. These settings use the ApplicationManagement policy CSP, which also lists the supported Windows editions.Īpp store (mobile only): Block prevents users from accessing the app store on mobile devices. Before you beginĬreate a Windows 10/11 device restrictions profile. The policies also apply to users who have an Intune license, and users that sign in to that device. Policies deployed to user groups apply to targeted users.

In a Windows 10/11 device restrictions profile, most configurable settings are deployed at the device level using device groups.

To see the supported editions, refer to the policy CSPs (opens another Microsoft web site). Some settings are only available on specific Windows editions, such as Enterprise.
