Configure App Install Control

App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly.

If you enable this setting, users will only be able to install apps from the Store.

If you disable this setting, users will be able to install apps from anywhere, including files downloaded from the Internet.

If you do not configure this setting, users will be able to choose their own setting for App Install Control.


Supported on: At least Windows Server 2016, Windows 10 Version 1703
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
Value NameConfigureAppInstallControl
Value TypeREG_SZ
Enabled ValueStoreOnly
Disabled ValueAnywhere

smartscreen.admx

Administrative Templates (Computers)

Administrative Templates (Users)