Windows 11 24H2 · 1.0

This policy setting allows you to control whether or not Search can perform queries on the web, [added: and ]if [added: the ]web results are displayed in [removed: Search, and if search highlights are shown in the search box and in search home.][added: Search.] If you enable this policy setting, queries won't be performed on the [removed: web,][added: web and] web results won't be displayed when a user performs a query in [removed: Search, and search highlights will not be shown in the search box and in search home.][added: Search.] If you disable this policy setting, queries will be performed on the [removed: web,][added: web and] web results will be displayed when a user performs a query in [removed: Search, and search highlights will be shown in the search box and in search home.][added: Search.] If you don't configure this policy setting, a user can choose whether or not Search can perform queries on the web, and if the web results are displayed in [removed: Search, and if search highlights are shown in the search box and in search home.][added: Search.]

This policy controls whether users can install packages from a website that is using the ms-appinstaller protocol.[removed: ][added: ]If you enable [removed: or do not configure ]this setting, users will be able to install packages from websites that use this protocol.[removed: ][added: ]If you disable[added: or do not configure] this setting, users will not be able to install packages from websites that use this protocol.

This policy controls the auto[removed: ][added: -]update interval for package-based sources.[added: The default source for Windows Package Manager is configured such that an index of the packages is cached on the local machine. The index is downloaded when a user invokes a command, and the interval has passed.] If you disable or do not configure this setting, the default interval or the value specified in [removed: settings will be used by the Windows Package Manager.][added: the Windows Package Manager settings will be used.] If you enable this setting, the number of minutes specified will be used by the Windows Package Manager.

This policy setting allows you to enable or disable Microsoft Application Virtualization (App-V) feature. Reboot is needed for disable to take effect.[added: Note: Application Virtualization (App-V) will reach end-of-life April 2026. After that time, the App-V client will be excluded from new versions of the Windows operating system. See aka.ms/AppVDeprecation for more information.]

This policy setting allows you to manage the deployment of [removed: Windows][added: packaged Microsoft] Store apps when the user is signed in using a special profile. Special profiles are the following user profiles, where changes are discarded after the user signs off: Roaming user profiles to which the "Delete cached copies of roaming profiles" Group Policy setting applies Mandatory user profiles and super-mandatory profiles, which are created by an administrator Temporary user profiles, which are created when an error prevents the correct profile from loading User profiles for the Guest account and members of the Guests group If you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of [removed: Windows][added: packaged Microsoft] Store apps when using a special profile. If you disable or do not configure this policy setting, Group Policy blocks deployment operations of [removed: Windows][added: packaged Microsoft] Store apps when using a special profile.

This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed [removed: Windows][added: packaged Microsoft] Store apps. If you enable this policy setting, you can install any LOB or developer-signed [removed: Windows][added: packaged Microsoft] Store app (which must be signed with a certificate chain that can be successfully validated by the local computer). If you disable or do not configure this policy setting, you cannot install LOB or developer-signed [removed: Windows][added: packaged Microsoft] Store apps.

Manages a sideloaded apps' ability to auto-update in the background.[removed: ] If you enable this policy, sideloaded apps will not auto-update in the background. If you disable this policy, sideloaded apps will auto-update in the background. Default is 'disabled' (key not present).

Manages a sideloaded apps' ability to auto-update in the background on a metered network.[removed: ] If you enable this policy, sideloaded apps will not auto-update in the background on a metered network. If you disable this policy, sideloaded apps will auto-update in the background on a metered network. Default is 'disabled' (key not present).

This policy setting lets you control whether [removed: Windows][added: packaged Microsoft] Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than [removed: Windows][added: packaged Microsoft] Store apps, there is a risk that a [removed: Windows][added: packaged Microsoft] Store app might compromise the system by opening a file in the default desktop app for a file type. If you enable this policy setting, [removed: Windows][added: packaged Microsoft] Store apps cannot open files in the default desktop app for a file type; they can open files only in other [removed: Windows][added: packaged Microsoft] Store apps. If you disable or do not configure this policy setting, [removed: Windows][added: packaged Microsoft] Store apps can open files in the default desktop app for a file type.

This policy setting lets you control whether [removed: Windows][added: packaged Microsoft] Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than [removed: Windows][added: packaged Microsoft] Store apps, there is a risk that a URI scheme launched by a [removed: Windows][added: packaged Microsoft] Store app might compromise the system by launching a desktop app. If you enable this policy setting, [removed: Windows][added: packaged Microsoft] Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other [removed: Windows][added: packaged Microsoft] Store apps. If you disable or do not configure this policy setting, [removed: Windows][added: packaged Microsoft] Store apps can open URIs in the default desktop app for a URI scheme. Note: Enabling this policy setting does not block [removed: Windows][added: packaged Microsoft] Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.

This policy setting lets you control whether Microsoft accounts are optional for [removed: Windows][added: packaged Microsoft] Store apps that require an account to sign in. This policy only affects [removed: Windows][added: packaged Microsoft] Store apps that support it. If you enable this policy setting, [removed: Windows][added: packaged Microsoft] Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead. If you disable or do not configure this policy setting, users will need to sign in with a Microsoft account.