Unable to disable Microsoft Store in domain environment
In AD, I create a new OU and moved my username into that OU so I can do testing with my own domain user account.
I then created a new GPO and enabled the following:
Computer Configuration > Policies > Administrative Templates > Windows Components > Store > Turn off the Store application = Enabled
I went to my local computer, connected it to the domain, logged in using my domain login details, Loaded CMD as administrator and typed
gpupdate
It displayed the following output:
C:Windows>gpupdate
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
C:Windows>
I tried loading Microsoft Store, but it still loads.
I then tried the following command:
gpupdate /force
The following output was displayed:
C:Windows>gpupdate /force
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
Certain Computer policies are enabled that can only run during startup.
OK to restart? (Y/N)Y
Restarting the computer...
..
C:Windows>
After the computer has restarted, it still loads Microsoft Store.
I have checked GPReport.html, and I can't see any mention of the GPO to disable the Microsoft Store.
Any ideas why this is not working?
Environment details:
Client computer on domain:
- Windows 10 Enterprise (Desktop client computers connected to the
domain)
On domain servers:
- Exchange 2013
- Active Directory 6.3.9xx
active-directory group-policy windows-10
edited Mar 20 at 16:15
Sembee
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
migrated from superuser.com Mar 20 at 15:50
This question came from our site for computer enthusiasts and power users.
add a comment |
In AD, I create a new OU and moved my username into that OU so I can do testing with my own domain user account.
I then created a new GPO and enabled the following:
Computer Configuration > Policies > Administrative Templates > Windows Components > Store > Turn off the Store application = Enabled
I went to my local computer, connected it to the domain, logged in using my domain login details, Loaded CMD as administrator and typed
gpupdate
It displayed the following output:
C:Windows>gpupdate
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
C:Windows>
I tried loading Microsoft Store, but it still loads.
I then tried the following command:
gpupdate /force
The following output was displayed:
C:Windows>gpupdate /force
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
Certain Computer policies are enabled that can only run during startup.
OK to restart? (Y/N)Y
Restarting the computer...
..
C:Windows>
After the computer has restarted, it still loads Microsoft Store.
I have checked GPReport.html, and I can't see any mention of the GPO to disable the Microsoft Store.
Any ideas why this is not working?
Environment details:
Client computer on domain:
- Windows 10 Enterprise (Desktop client computers connected to the
domain)
On domain servers:
- Exchange 2013
- Active Directory 6.3.9xx
active-directory group-policy windows-10
edited Mar 20 at 16:15
Sembee
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
migrated from superuser.com Mar 20 at 15:50
This question came from our site for computer enthusiasts and power users.
add a comment |
In AD, I create a new OU and moved my username into that OU so I can do testing with my own domain user account.
I then created a new GPO and enabled the following:
Computer Configuration > Policies > Administrative Templates > Windows Components > Store > Turn off the Store application = Enabled
I went to my local computer, connected it to the domain, logged in using my domain login details, Loaded CMD as administrator and typed
gpupdate
It displayed the following output:
C:Windows>gpupdate
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
C:Windows>
I tried loading Microsoft Store, but it still loads.
I then tried the following command:
gpupdate /force
The following output was displayed:
C:Windows>gpupdate /force
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
Certain Computer policies are enabled that can only run during startup.
OK to restart? (Y/N)Y
Restarting the computer...
..
C:Windows>
After the computer has restarted, it still loads Microsoft Store.
I have checked GPReport.html, and I can't see any mention of the GPO to disable the Microsoft Store.
Any ideas why this is not working?
Environment details:
Client computer on domain:
- Windows 10 Enterprise (Desktop client computers connected to the
domain)
On domain servers:
- Exchange 2013
- Active Directory 6.3.9xx
active-directory group-policy windows-10
edited Mar 20 at 16:15
Sembee
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
In AD, I create a new OU and moved my username into that OU so I can do testing with my own domain user account.
I then created a new GPO and enabled the following:
Computer Configuration > Policies > Administrative Templates > Windows Components > Store > Turn off the Store application = Enabled
I went to my local computer, connected it to the domain, logged in using my domain login details, Loaded CMD as administrator and typed
gpupdate
It displayed the following output:
C:Windows>gpupdate
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
C:Windows>
I tried loading Microsoft Store, but it still loads.
I then tried the following command:
gpupdate /force
The following output was displayed:
C:Windows>gpupdate /force
Updating policy...
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
Certain Computer policies are enabled that can only run during startup.
OK to restart? (Y/N)Y
Restarting the computer...
..
C:Windows>
After the computer has restarted, it still loads Microsoft Store.
I have checked GPReport.html, and I can't see any mention of the GPO to disable the Microsoft Store.
Any ideas why this is not working?
Environment details:
Client computer on domain:
- Windows 10 Enterprise (Desktop client computers connected to the
domain)
On domain servers:
- Exchange 2013
- Active Directory 6.3.9xx
active-directory group-policy windows-10
active-directory group-policy windows-10
edited Mar 20 at 16:15
Sembee
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
edited Mar 20 at 16:15
Sembee
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
edited Mar 20 at 16:15
Sembee
2,7621411
edited Mar 20 at 16:15
Sembee
2,7621411
edited Mar 20 at 16:15
Sembee
2,7621411
2,7621411
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
asked Mar 20 at 15:14
oshirowanenoshirowanen
192112
192112
migrated from superuser.com Mar 20 at 15:50
This question came from our site for computer enthusiasts and power users.
migrated from superuser.com Mar 20 at 15:50
This question came from our site for computer enthusiasts and power users.
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
In AD, I create a new OU and moved my username into that OU so I can
do testing with my own domain user account.
You can't link a Computer Setting GPO to a User account, you must link it to a Computer Account.
I have checked GPReport.html, and I can't see any mention of the GPO
to disable the Microsoft Store.
As a result, GPResult don't show the GPO linked, it's normal.
Make sure the GPO is enforced to the correct OU where the computer account is to have the settings applied.
For me it's a simple error from there. Why ? because if it would be a security group error or a WMI filter, the GPO would be listed inside GPResult, but with an access denied error.
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
add a comment |
I'm not sure why it is not working but my AD environment consists of Win 10 Pro machines and I wanted to accomplish the same thing. I ended up having to utilize software
restriction policies.
Computer Config>Windows Settings>Software Restriction Policies>Additional Rules
then add the following:
%programfiles%WindowsAppsMicrosoft.WindowsStore*
With the security level set to Disallowed
Pic of the GPO settings blocking Store, XBOX, Skype, Windows Mail
And the end result:
Hope this helps :)
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f959149%2funable-to-disable-microsoft-store-in-domain-environment%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
In AD, I create a new OU and moved my username into that OU so I can
do testing with my own domain user account.
You can't link a Computer Setting GPO to a User account, you must link it to a Computer Account.
I have checked GPReport.html, and I can't see any mention of the GPO
to disable the Microsoft Store.
As a result, GPResult don't show the GPO linked, it's normal.
Make sure the GPO is enforced to the correct OU where the computer account is to have the settings applied.
For me it's a simple error from there. Why ? because if it would be a security group error or a WMI filter, the GPO would be listed inside GPResult, but with an access denied error.
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
add a comment |
In AD, I create a new OU and moved my username into that OU so I can
do testing with my own domain user account.
You can't link a Computer Setting GPO to a User account, you must link it to a Computer Account.
I have checked GPReport.html, and I can't see any mention of the GPO
to disable the Microsoft Store.
As a result, GPResult don't show the GPO linked, it's normal.
Make sure the GPO is enforced to the correct OU where the computer account is to have the settings applied.
For me it's a simple error from there. Why ? because if it would be a security group error or a WMI filter, the GPO would be listed inside GPResult, but with an access denied error.
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
add a comment |
In AD, I create a new OU and moved my username into that OU so I can
do testing with my own domain user account.
You can't link a Computer Setting GPO to a User account, you must link it to a Computer Account.
I have checked GPReport.html, and I can't see any mention of the GPO
to disable the Microsoft Store.
As a result, GPResult don't show the GPO linked, it's normal.
Make sure the GPO is enforced to the correct OU where the computer account is to have the settings applied.
For me it's a simple error from there. Why ? because if it would be a security group error or a WMI filter, the GPO would be listed inside GPResult, but with an access denied error.
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
In AD, I create a new OU and moved my username into that OU so I can
do testing with my own domain user account.
You can't link a Computer Setting GPO to a User account, you must link it to a Computer Account.
I have checked GPReport.html, and I can't see any mention of the GPO
to disable the Microsoft Store.
As a result, GPResult don't show the GPO linked, it's normal.
Make sure the GPO is enforced to the correct OU where the computer account is to have the settings applied.
For me it's a simple error from there. Why ? because if it would be a security group error or a WMI filter, the GPO would be listed inside GPResult, but with an access denied error.
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
edited Mar 20 at 16:36
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
answered Mar 20 at 16:01
yagmoth555♦yagmoth555
12.2k31842
12.2k31842
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
add a comment |
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
1
1
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
They applied a Computer policy to an OU with their User account.
– Greg Askew
Mar 20 at 16:32
1
1
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
@GregAskew oh, yeah, just re-read, it's even wrote in the first line, will edit
– yagmoth555♦
Mar 20 at 16:34
add a comment |
I'm not sure why it is not working but my AD environment consists of Win 10 Pro machines and I wanted to accomplish the same thing. I ended up having to utilize software
restriction policies.
Computer Config>Windows Settings>Software Restriction Policies>Additional Rules
then add the following:
%programfiles%WindowsAppsMicrosoft.WindowsStore*
With the security level set to Disallowed
Pic of the GPO settings blocking Store, XBOX, Skype, Windows Mail
And the end result:
Hope this helps :)
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I'm not sure why it is not working but my AD environment consists of Win 10 Pro machines and I wanted to accomplish the same thing. I ended up having to utilize software
restriction policies.
Computer Config>Windows Settings>Software Restriction Policies>Additional Rules
then add the following:
%programfiles%WindowsAppsMicrosoft.WindowsStore*
With the security level set to Disallowed
Pic of the GPO settings blocking Store, XBOX, Skype, Windows Mail
And the end result:
Hope this helps :)
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I'm not sure why it is not working but my AD environment consists of Win 10 Pro machines and I wanted to accomplish the same thing. I ended up having to utilize software
restriction policies.
Computer Config>Windows Settings>Software Restriction Policies>Additional Rules
then add the following:
%programfiles%WindowsAppsMicrosoft.WindowsStore*
With the security level set to Disallowed
Pic of the GPO settings blocking Store, XBOX, Skype, Windows Mail
And the end result:
Hope this helps :)
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I'm not sure why it is not working but my AD environment consists of Win 10 Pro machines and I wanted to accomplish the same thing. I ended up having to utilize software
restriction policies.
Computer Config>Windows Settings>Software Restriction Policies>Additional Rules
then add the following:
%programfiles%WindowsAppsMicrosoft.WindowsStore*
With the security level set to Disallowed
Pic of the GPO settings blocking Store, XBOX, Skype, Windows Mail
And the end result:
Hope this helps :)
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited Mar 20 at 21:51
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
answered Mar 20 at 21:12
D3FR4GD3FR4G
612
612
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
D3FR4G is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f959149%2funable-to-disable-microsoft-store-in-domain-environment%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
