Block launching Universal Windows apps with Windows Runtime API access from hosted content.


This policy setting controls whether Universal Windows apps with Windows Runtime API access directly from web content can be launched.

If you enable this policy setting, Universal Windows apps which declare Windows Runtime API access in ApplicationContentUriRules section of the manifest cannot be launched; Universal Windows apps which have not declared Windows Runtime API access in the manifest are not affected.

If you disable or do not configure this policy setting, all Universal Windows apps can be launched.

This policy should not be enabled unless recommended by Microsoft as a security response because it can cause severe app compatibility issues.


Supported on: At least Windows 10 Server, Windows 10 or Windows 10 RT
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Microsoft\Windows\CurrentVersion\Policies\System
Value NameBlockHostedAppAccessWinRT
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

appxruntime.admx

Administrative Templates (Computers)

Administrative Templates (Users)