Windows 10 – Custom – Block store policy

Block store policy for Windows 10 devices

./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/7d47d89a-7900-47c5-93f2-46eb6d94c159/StoreApps/Policy

String XML

<RuleCollection Type="Appx" EnforcementMode="NotConfigured">
  <FilePublisherRule Id="44141bee-49bd-4dda-8659-bddefbb6de39" Name="Microsoft.WindowsStore, from Microsoft Corporation" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
    <Conditions>
      <FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="Microsoft.WindowsStore" BinaryName="*">
        <BinaryVersionRange LowSection="*" HighSection="*" />
      </FilePublisherCondition>
    </Conditions>
  </FilePublisherRule>

  <FilePublisherRule Id="a9e18c21-ff8f-43cf-b9fc-db40eed693ba" Name="(Default Rule) All signed packaged apps" Description="Allows members of the Everyone group to run packaged apps that are signed." UserOrGroupSid="S-1-1-0" Action="Allow">
    <Conditions>
      <FilePublisherCondition PublisherName="*" ProductName="*" BinaryName="*">
        <BinaryVersionRange LowSection="0.0.0.0" HighSection="*" />
      </FilePublisherCondition>
    </Conditions>
  </FilePublisherRule>
</RuleCollection>