From 0489d93d44e6e9d7eed8226126df8f11c17c2a57 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 14:21:38 +0530
Subject: [PATCH 01/23] Policy CSP: WindowsPackageManager
The updates here are made as per policy id: 4251. Thanks!
---
.../policy-configuration-service-provider.md | 7 ++
.../policy-csp-admx-windowspackagemanager.md | 88 +++++++++++++++++++
windows/client-management/mdm/toc.yml | 2 +
3 files changed, 97 insertions(+)
create mode 100644 windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 3b79fcf245..0360b4d417 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -5173,6 +5173,13 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_WindowsPackageManager policies
+
+ -
+ ADMX_WindowsPackageManager/EnableAdditionalSources
+
+
+
### ADMX_WindowsRemoteManagement policies
diff --git a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
new file mode 100644
index 0000000000..032878f3ff
--- /dev/null
+++ b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
@@ -0,0 +1,88 @@
+---
+title: Policy CSP - ADMX_WindowsPackageManager
+description: Learn about the Policy CSP - ADMX_WindowsPackageManager.
+ms.author: aljupudi
+ms.localizationpriority: medium
+ms.topic: article
+ms.prod: w10
+ms.technology: windows
+author: aljupudi
+ms.date: 08/24/2022
+ms.reviewer:
+manager: aaroncz
+---
+
+# Policy CSP - ADMX_WindowsPackageManager
+>[!TIP]
+> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+>
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
+>
+> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+
+
+
+
+
+## ADMX_WindowsPackageManager policies
+
+
+ -
+ ADMX_WindowsPackageManager/EnableAdditionalSources
+
+
+
+
+
+
+
+**ADMX_WindowsPackageManager/EnableAdditionalSources**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy controls additional sources approved for users to configure using [Windows Package Manager](/windows/package-manager/).
+
+If you do not configure this setting, users will be able to add or remove additional sources other than those configured by policy.
+
+If you enable this setting, only the sources specified can be added or removed from Windows Package Manager. The representation for each allowed source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
+
+If you disable this setting, no additional sources can be configured by the user for Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Additional Windows Package Manager Sources*
+- GP name: *EnableAdditionalSources*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml
index 859cfd31fa..1454b1bbdf 100644
--- a/windows/client-management/mdm/toc.yml
+++ b/windows/client-management/mdm/toc.yml
@@ -617,6 +617,8 @@ items:
href: policy-csp-admx-windowsmediadrm.md
- name: ADMX_WindowsMediaPlayer
href: policy-csp-admx-windowsmediaplayer.md
+ - name: ADMX_WindowsPackageManager
+ href: policy-csp-admx-windowspackagemanager.md
- name: ADMX_WindowsRemoteManagement
href: policy-csp-admx-windowsremotemanagement.md
- name: ADMX_WindowsStore
From 103a7ed1ebb08cd1e15b204a19c3c62c2b6e6f90 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 14:27:27 +0530
Subject: [PATCH 02/23] adding in admx backed policies article
---
.../client-management/mdm/policies-in-policy-csp-admx-backed.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index e06e70792f..3fb5533dcf 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1479,6 +1479,7 @@ ms.date: 10/08/2020
- [ADMX_WindowsMediaPlayer/PreventWMPDeskTopShortcut](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-preventwmpdesktopshortcut)
- [ADMX_WindowsMediaPlayer/SkinLockDown](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-skinlockdown)
- [ADMX_WindowsMediaPlayer/WindowsStreamingMediaProtocols](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-windowsstreamingmediaprotocols)
+- [ADMX_WindowsPackageManager/EnableAdditionalSources](./policy-csp-admx-windowspackagemanager.md#admx-windowspackagemanager-enableadditionalsources)
- [ADMX_WindowsRemoteManagement/DisallowKerberos_1](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-1)
- [ADMX_WindowsRemoteManagement/DisallowKerberos_2](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-2)
- [ADMX_WindowsStore/DisableAutoDownloadWin8](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableautodownloadwin8)
From 50150d929aaf2c4cb83d20a9e6fe00f72e69a0bf Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 14:35:41 +0530
Subject: [PATCH 03/23] fixing warning
---
.../mdm/policy-csp-admx-windowspackagemanager.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
index 032878f3ff..fc5e51ce5d 100644
--- a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
+++ b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
@@ -1,12 +1,12 @@
---
title: Policy CSP - ADMX_WindowsPackageManager
description: Learn about the Policy CSP - ADMX_WindowsPackageManager.
-ms.author: aljupudi
+ms.author: v-aljupudi
ms.localizationpriority: medium
ms.topic: article
ms.prod: w10
ms.technology: windows
-author: aljupudi
+author: alekyaj
ms.date: 08/24/2022
ms.reviewer:
manager: aaroncz
From 43cb8c8e890e7e9c9df1d6bfaf5bd1cdb19c210e Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 14:39:13 +0530
Subject: [PATCH 04/23] acrolinx fix
---
.../mdm/policy-csp-admx-windowspackagemanager.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
index fc5e51ce5d..cc2b0f9ccd 100644
--- a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
+++ b/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
@@ -65,7 +65,7 @@ manager: aaroncz
This policy controls additional sources approved for users to configure using [Windows Package Manager](/windows/package-manager/).
-If you do not configure this setting, users will be able to add or remove additional sources other than those configured by policy.
+If you don't configure this setting, users will be able to add or remove additional sources other than the ones that are configured by policy.
If you enable this setting, only the sources specified can be added or removed from Windows Package Manager. The representation for each allowed source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
From 56c02f3c10557b9404da91fdd7103b243fbedf46 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 17:51:56 +0530
Subject: [PATCH 05/23] DesktopAppInstaller update
---
.../mdm/policies-in-policy-csp-admx-backed.md | 2 +-
.../policy-configuration-service-provider.md | 13 +++++++------
... => policy-csp-admx-desktopappinstaller.md} | 18 +++++++++---------
windows/client-management/mdm/toc.yml | 4 ++--
4 files changed, 19 insertions(+), 18 deletions(-)
rename windows/client-management/mdm/{policy-csp-admx-windowspackagemanager.md => policy-csp-admx-desktopappinstaller.md} (64%)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index 3fb5533dcf..3e8c1c7bae 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -156,6 +156,7 @@ ms.date: 10/08/2020
- [ADMX_Desktop/sz_DB_DragDropClose](./policy-csp-admx-desktop.md#admx-desktop-sz-db-dragdropclose)
- [ADMX_Desktop/sz_DB_Moving](./policy-csp-admx-desktop.md#admx-desktop-sz-db-moving)
- [ADMX_Desktop/sz_DWP_NoHTMLPaper](./policy-csp-admx-desktop.md#admx-desktop-sz-dwp-nohtmlpaper)
+- [ADMX_DesktopAppInstaller/EnableAdditionalSources](./policy-csp-admx-desktopappinstaller.md#admx-desktopappinstaller-enableadditionalsources)
- [ADMX_DeviceCompat/DeviceFlags](./policy-csp-admx-devicecompat.md#admx-devicecompat-deviceflags)
- [ADMX_DeviceCompat/DriverShims](./policy-csp-admx-devicecompat.md#admx-devicecompat-drivershims)
- [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall)
@@ -1479,7 +1480,6 @@ ms.date: 10/08/2020
- [ADMX_WindowsMediaPlayer/PreventWMPDeskTopShortcut](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-preventwmpdesktopshortcut)
- [ADMX_WindowsMediaPlayer/SkinLockDown](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-skinlockdown)
- [ADMX_WindowsMediaPlayer/WindowsStreamingMediaProtocols](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-windowsstreamingmediaprotocols)
-- [ADMX_WindowsPackageManager/EnableAdditionalSources](./policy-csp-admx-windowspackagemanager.md#admx-windowspackagemanager-enableadditionalsources)
- [ADMX_WindowsRemoteManagement/DisallowKerberos_1](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-1)
- [ADMX_WindowsRemoteManagement/DisallowKerberos_2](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-2)
- [ADMX_WindowsStore/DisableAutoDownloadWin8](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableautodownloadwin8)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 0360b4d417..80310689a7 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -692,6 +692,13 @@ Supported operations are Add and Get. Does not support Delete.
+### ADMX_DesktopAppInstaller policies
+
+ -
+ ADMX_DesktopAppInstaller/EnableAdditionalSources
+
+
+
### ADMX_DeviceCompat policies
@@ -5173,12 +5180,6 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
-### ADMX_WindowsPackageManager policies
-
- -
- ADMX_WindowsPackageManager/EnableAdditionalSources
-
-
### ADMX_WindowsRemoteManagement policies
diff --git a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md b/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
similarity index 64%
rename from windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
rename to windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
index cc2b0f9ccd..b59842a610 100644
--- a/windows/client-management/mdm/policy-csp-admx-windowspackagemanager.md
+++ b/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
@@ -1,6 +1,6 @@
---
-title: Policy CSP - ADMX_WindowsPackageManager
-description: Learn about the Policy CSP - ADMX_WindowsPackageManager.
+title: Policy CSP - ADMX_DesktopAppInstaller
+description: Learn about the Policy CSP - ADMX_DesktopAppInstaller.
ms.author: v-aljupudi
ms.localizationpriority: medium
ms.topic: article
@@ -12,7 +12,7 @@ ms.reviewer:
manager: aaroncz
---
-# Policy CSP - ADMX_WindowsPackageManager
+# Policy CSP - ADMX_DesktopAppInstaller
>[!TIP]
> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
@@ -24,11 +24,11 @@ manager: aaroncz
-## ADMX_WindowsPackageManager policies
+## ADMX_DesktopAppInstaller policies
-
- ADMX_WindowsPackageManager/EnableAdditionalSources
+ ADMX_DesktopAppInstaller/EnableAdditionalSources
@@ -36,7 +36,7 @@ manager: aaroncz
-**ADMX_WindowsPackageManager/EnableAdditionalSources**
+**ADMX_DesktopAppInstaller/EnableAdditionalSources**
@@ -63,11 +63,11 @@ manager: aaroncz
-This policy controls additional sources approved for users to configure using [Windows Package Manager](/windows/package-manager/).
+This policy controls additional sources configured for [Windows Package Manager](/windows/package-manager/).
-If you don't configure this setting, users will be able to add or remove additional sources other than the ones that are configured by policy.
+If you do not configure this setting, no additional sources will be configured for Windows Package Manager.
-If you enable this setting, only the sources specified can be added or removed from Windows Package Manager. The representation for each allowed source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
+If you enable this setting, additional sources will be added to Windows Package Manager and cannot be removed. The representation for each additional source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
If you disable this setting, no additional sources can be configured by the user for Windows Package Manager.
diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml
index 1454b1bbdf..376c92f18d 100644
--- a/windows/client-management/mdm/toc.yml
+++ b/windows/client-management/mdm/toc.yml
@@ -617,8 +617,8 @@ items:
href: policy-csp-admx-windowsmediadrm.md
- name: ADMX_WindowsMediaPlayer
href: policy-csp-admx-windowsmediaplayer.md
- - name: ADMX_WindowsPackageManager
- href: policy-csp-admx-windowspackagemanager.md
+ - name: ADMX_DesktopAppInstaller
+ href: policy-csp-admx-desktopappinstaller.md
- name: ADMX_WindowsRemoteManagement
href: policy-csp-admx-windowsremotemanagement.md
- name: ADMX_WindowsStore
From f9aa972f58f48e3f770fd311c86fc07c89ef4543 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Wed, 24 Aug 2022 17:59:06 +0530
Subject: [PATCH 06/23] acrolinx fix
---
.../mdm/policy-csp-admx-desktopappinstaller.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
index b59842a610..1e72749840 100644
--- a/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
@@ -65,9 +65,9 @@ manager: aaroncz
This policy controls additional sources configured for [Windows Package Manager](/windows/package-manager/).
-If you do not configure this setting, no additional sources will be configured for Windows Package Manager.
+If you don't configure this setting, no additional sources will be configured for Windows Package Manager.
-If you enable this setting, additional sources will be added to Windows Package Manager and cannot be removed. The representation for each additional source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
+If you enable this setting, additional sources will be added to Windows Package Manager, and can't be removed. The representation for each additional source can be obtained from installed sources using [*winget source export*](/windows/package-manager/winget/).
If you disable this setting, no additional sources can be configured by the user for Windows Package Manager.
From f9f411849c8184a66a557bdd522052c1c077b516 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Thu, 25 Aug 2022 10:58:42 +0530
Subject: [PATCH 07/23] Feedback
---
.../mdm/policies-in-policy-csp-admx-backed.md | 2 +-
.../mdm/policy-configuration-service-provider.md | 14 +++++++-------
...taller.md => policy-csp-desktopappinstaller.md} | 13 ++++++-------
windows/client-management/mdm/toc.yml | 4 ++--
4 files changed, 16 insertions(+), 17 deletions(-)
rename windows/client-management/mdm/{policy-csp-admx-desktopappinstaller.md => policy-csp-desktopappinstaller.md} (83%)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index 3e8c1c7bae..c9f33ed1f6 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -156,7 +156,6 @@ ms.date: 10/08/2020
- [ADMX_Desktop/sz_DB_DragDropClose](./policy-csp-admx-desktop.md#admx-desktop-sz-db-dragdropclose)
- [ADMX_Desktop/sz_DB_Moving](./policy-csp-admx-desktop.md#admx-desktop-sz-db-moving)
- [ADMX_Desktop/sz_DWP_NoHTMLPaper](./policy-csp-admx-desktop.md#admx-desktop-sz-dwp-nohtmlpaper)
-- [ADMX_DesktopAppInstaller/EnableAdditionalSources](./policy-csp-admx-desktopappinstaller.md#admx-desktopappinstaller-enableadditionalsources)
- [ADMX_DeviceCompat/DeviceFlags](./policy-csp-admx-devicecompat.md#admx-devicecompat-deviceflags)
- [ADMX_DeviceCompat/DriverShims](./policy-csp-admx-devicecompat.md#admx-devicecompat-drivershims)
- [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall)
@@ -1032,6 +1031,7 @@ ms.date: 10/08/2020
- [ADMX_StartMenu/ClearRecentProgForNewUserInStartMenu](./policy-csp-admx-startmenu.md#admx-startmenu-clearrecentprogfornewuserinstartmenu)
- [ADMX_StartMenu/ClearTilesOnExit](./policy-csp-admx-startmenu.md#admx-startmenu-cleartilesonexit)
- [ADMX_StartMenu/DesktopAppsFirstInAppsView](./policy-csp-admx-startmenu.md#admx-startmenu-desktopappsfirstinappsview)
+- [DesktopAppInstaller/EnableAdditionalSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableadditionalsources)
- [ADMX_StartMenu/DisableGlobalSearchOnAppsView](./policy-csp-admx-startmenu.md#admx-startmenu-disableglobalsearchonappsview)
- [ADMX_StartMenu/ForceStartMenuLogOff](./policy-csp-admx-startmenu.md#admx-startmenu-forcestartmenulogoff)
- [ADMX_StartMenu/GoToDesktopOnSignIn](./policy-csp-admx-startmenu.md#admx-startmenu-gotodesktoponsignin)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 80310689a7..c2b0a74b9c 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -692,13 +692,6 @@ Supported operations are Add and Get. Does not support Delete.
-### ADMX_DesktopAppInstaller policies
-
- -
- ADMX_DesktopAppInstaller/EnableAdditionalSources
-
-
-
### ADMX_DeviceCompat policies
@@ -6311,6 +6304,13 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### DesktopAppInstaller policies
+
+ -
+ DesktopAppInstaller/EnableAdditionalSources
+
+
+
### DeviceGuard policies
diff --git a/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
similarity index 83%
rename from windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
rename to windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 1e72749840..e99644e68d 100644
--- a/windows/client-management/mdm/policy-csp-admx-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -1,6 +1,6 @@
---
-title: Policy CSP - ADMX_DesktopAppInstaller
-description: Learn about the Policy CSP - ADMX_DesktopAppInstaller.
+title: Policy CSP - DesktopAppInstaller
+description: Learn about the Policy CSP - DesktopAppInstaller.
ms.author: v-aljupudi
ms.localizationpriority: medium
ms.topic: article
@@ -12,7 +12,7 @@ ms.reviewer:
manager: aaroncz
---
-# Policy CSP - ADMX_DesktopAppInstaller
+# Policy CSP - DesktopAppInstaller
>[!TIP]
> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
@@ -24,11 +24,11 @@ manager: aaroncz
-## ADMX_DesktopAppInstaller policies
+## DesktopAppInstaller policies
-
- ADMX_DesktopAppInstaller/EnableAdditionalSources
+ DesktopAppInstaller/EnableAdditionalSources
@@ -36,7 +36,7 @@ manager: aaroncz
-**ADMX_DesktopAppInstaller/EnableAdditionalSources**
+**DesktopAppInstaller/EnableAdditionalSources**
@@ -49,7 +49,6 @@ manager: aaroncz
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
-
diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml
index 376c92f18d..bd6670aaa0 100644
--- a/windows/client-management/mdm/toc.yml
+++ b/windows/client-management/mdm/toc.yml
@@ -617,8 +617,6 @@ items:
href: policy-csp-admx-windowsmediadrm.md
- name: ADMX_WindowsMediaPlayer
href: policy-csp-admx-windowsmediaplayer.md
- - name: ADMX_DesktopAppInstaller
- href: policy-csp-admx-desktopappinstaller.md
- name: ADMX_WindowsRemoteManagement
href: policy-csp-admx-windowsremotemanagement.md
- name: ADMX_WindowsStore
@@ -687,6 +685,8 @@ items:
href: policy-csp-deliveryoptimization.md
- name: Desktop
href: policy-csp-desktop.md
+ - name: DesktopAppInstaller
+ href: policy-csp-desktopappinstaller.md
- name: DeviceGuard
href: policy-csp-deviceguard.md
- name: DeviceHealthMonitoring
From 93d8d79594c7469ddadfee67e9fe778ead8d1059 Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Thu, 25 Aug 2022 11:02:11 +0530
Subject: [PATCH 08/23] Update policies-in-policy-csp-admx-backed.md
---
.../client-management/mdm/policies-in-policy-csp-admx-backed.md | 1 -
1 file changed, 1 deletion(-)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index c9f33ed1f6..e06e70792f 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1031,7 +1031,6 @@ ms.date: 10/08/2020
- [ADMX_StartMenu/ClearRecentProgForNewUserInStartMenu](./policy-csp-admx-startmenu.md#admx-startmenu-clearrecentprogfornewuserinstartmenu)
- [ADMX_StartMenu/ClearTilesOnExit](./policy-csp-admx-startmenu.md#admx-startmenu-cleartilesonexit)
- [ADMX_StartMenu/DesktopAppsFirstInAppsView](./policy-csp-admx-startmenu.md#admx-startmenu-desktopappsfirstinappsview)
-- [DesktopAppInstaller/EnableAdditionalSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableadditionalsources)
- [ADMX_StartMenu/DisableGlobalSearchOnAppsView](./policy-csp-admx-startmenu.md#admx-startmenu-disableglobalsearchonappsview)
- [ADMX_StartMenu/ForceStartMenuLogOff](./policy-csp-admx-startmenu.md#admx-startmenu-forcestartmenulogoff)
- [ADMX_StartMenu/GoToDesktopOnSignIn](./policy-csp-admx-startmenu.md#admx-startmenu-gotodesktoponsignin)
From b08c1fd76e1df484b0b6a197bdc5265344ba6b6d Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Thu, 25 Aug 2022 11:12:09 +0530
Subject: [PATCH 09/23] Update policy-csp-desktopappinstaller.md
---
.../mdm/policy-csp-desktopappinstaller.md | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index e99644e68d..d3b666ab89 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -13,6 +13,7 @@ manager: aaroncz
---
# Policy CSP - DesktopAppInstaller
+
>[!TIP]
> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
@@ -84,4 +85,8 @@ ADMX Info:
-
\ No newline at end of file
+
+
+## Related topics
+
+[Policy configuration service provider](policy-configuration-service-provider.md)
\ No newline at end of file
From 5f8695fd80afed178b5ba4007d7dc3669396971b Mon Sep 17 00:00:00 2001
From: Alekhya Jupudi <89069896+alekyaj@users.noreply.github.com>
Date: Thu, 25 Aug 2022 11:19:59 +0530
Subject: [PATCH 10/23] Update policies-in-policy-csp-admx-backed.md
---
.../client-management/mdm/policies-in-policy-csp-admx-backed.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index e06e70792f..a1ac2092ba 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1559,6 +1559,7 @@ ms.date: 10/08/2020
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
- [Desktop/PreventUserRedirectionOfProfileFolders](./policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders)
+- [DesktopAppInstaller/EnableAdditionalSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableadditionalsources)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceIDs](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdeviceids)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdevicesetupclasses)
- [DeviceInstallation/PreventDeviceMetadataFromNetwork](./policy-csp-deviceinstallation.md#deviceinstallationpreventdevicemetadatafromnetwork)
From d4639ccc3f2e3e5ad62178dd6b7ce2ecd598e38a Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Fri, 26 Aug 2022 15:34:12 +0530
Subject: [PATCH 11/23] Updated EnableAppInstaller-4244
---
.../mdm/policy-csp-desktopappinstaller.md | 49 +++++++++++++++++++
1 file changed, 49 insertions(+)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index d3b666ab89..3a48249d99 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -31,6 +31,9 @@ manager: aaroncz
-
DesktopAppInstaller/EnableAdditionalSources
+ -
+ DesktopAppInstaller/EnableAppInstaller
+
@@ -85,6 +88,52 @@ ADMX Info:
+
+**DesktopAppInstaller/EnableAppInstaller**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy controls whether Windows Package Manager can be used by users. Users will still be able to execute the *winget* command. The default help will be displayed, and users will still be able to execute *winget -?* to display the help as well. Any other command will result in the user being informed the operation is disabled by Group Policy.
+
+- If you enable or do not configure this setting, users will be able to use the Windows Package Manager.
+- If you disable this setting, users will not be able to use the Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Controls whether the Windows Package Manager can be used by the users.*
+- GP name: *EnableAppInstaller*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
## Related topics
From 46da675b7a829cd1b309c86bfcb5857bfc0d287c Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 29 Aug 2022 02:11:38 +0530
Subject: [PATCH 12/23] Update policy-csp-desktopappinstaller.md
---
.../mdm/policy-csp-desktopappinstaller.md | 103 +++++++++++++++++-
1 file changed, 102 insertions(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 3a48249d99..c579d9d1f4 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -34,6 +34,12 @@ manager: aaroncz
DesktopAppInstaller/EnableAppInstaller
+
+ DesktopAppInstaller/EnableDefaultSource
+
+
+ DesktopAppInstaller/EnableLocalManifestFiles
+
@@ -124,7 +130,7 @@ This policy controls whether Windows Package Manager can be used by users. Users
ADMX Info:
-- GP Friendly name: *Controls whether the Windows Package Manager can be used by the users.*
+- GP Friendly name: *Controls whether the Windows Package Manager can be used by the users*
- GP name: *EnableAppInstaller*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
@@ -134,6 +140,101 @@ ADMX Info:
+
+**DesktopAppInstaller/EnableDefaultSource**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls the default source included with the Windows Package Manager.
+If you do not configure this setting, the default source for the Windows Package Manager will be available and can be removed.
+- If you enable this setting, the default source for the Windows Package Manager will be available and cannot be removed.
+- If you disable this setting the default source for the Windows Package Manager will not be available.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Default Source*
+- GP name: *EnableDefaultSource*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
+**DesktopAppInstaller/EnableLocalManifestFiles**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether users can install packages with local manifest files. If a user has a manifest available via their local file system rather than a Windows Package Manager source, they may install packages using *winget install -m *.
+
+- If you enable or do not configure this setting, users will be able to install packages with local manifests by using Windows Package Manager.
+
+- If you disable this setting, users will not be able to install packages with local manifests by using Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Local Manifest Files*
+- GP name: *EnableLocalManifestFiles*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
## Related topics
From c0181981c724f2c956e71a7657a8a30a6989f2ad Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 29 Aug 2022 02:16:41 +0530
Subject: [PATCH 13/23] Update policy-csp-desktopappinstaller.md
---
.../mdm/policy-csp-desktopappinstaller.md | 18 ++++++++++--------
1 file changed, 10 insertions(+), 8 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index c579d9d1f4..a3511ec46b 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -40,6 +40,9 @@ manager: aaroncz
DesktopAppInstaller/EnableLocalManifestFiles
+
+ DesktopAppInstaller/EnableMicrosoftStoreSource
+
@@ -188,7 +191,7 @@ ADMX Info:
-**DesktopAppInstaller/EnableLocalManifestFiles**
+**DesktopAppInstaller/EnableMicrosoftStoreSource**
@@ -215,18 +218,17 @@ ADMX Info:
-This policy controls whether users can install packages with local manifest files. If a user has a manifest available via their local file system rather than a Windows Package Manager source, they may install packages using *winget install -m *.
-
-- If you enable or do not configure this setting, users will be able to install packages with local manifests by using Windows Package Manager.
-
-- If you disable this setting, users will not be able to install packages with local manifests by using Windows Package Manager.
+This policy controls the Microsoft Store source included with the Windows Package Manager.
+If you do not configure this setting, the Microsoft Store source for the Windows Package manager will be available and can be removed.
+- If you enable this setting, the Microsoft Store source for the Windows Package Manager will be available and cannot be removed.
+- If you disable this setting the Microsoft Store source for the Windows Package Manager will not be available.
ADMX Info:
-- GP Friendly name: *Enable Windows Package Manager Local Manifest Files*
-- GP name: *EnableLocalManifestFiles*
+- GP Friendly name: *Enable Windows Package Manager Microsoft Store Source*
+- GP name: *EnableMicrosoftStoreSource*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
From d50559bb5537ce1632ba17d0449115d5c990321c Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 29 Aug 2022 15:45:34 +0530
Subject: [PATCH 14/23] Update policy-csp-desktopappinstaller.md
---
.../mdm/policy-csp-desktopappinstaller.md | 64 ++++++++++++++++---
1 file changed, 56 insertions(+), 8 deletions(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index a3511ec46b..3dc17b4037 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -126,8 +126,8 @@ ADMX Info:
This policy controls whether Windows Package Manager can be used by users. Users will still be able to execute the *winget* command. The default help will be displayed, and users will still be able to execute *winget -?* to display the help as well. Any other command will result in the user being informed the operation is disabled by Group Policy.
-- If you enable or do not configure this setting, users will be able to use the Windows Package Manager.
-- If you disable this setting, users will not be able to use the Windows Package Manager.
+- If you enable or don't configure this setting, users will be able to use the Windows Package Manager.
+- If you disable this setting, users won't be able to use the Windows Package Manager.
@@ -172,9 +172,9 @@ ADMX Info:
This policy controls the default source included with the Windows Package Manager.
-If you do not configure this setting, the default source for the Windows Package Manager will be available and can be removed.
-- If you enable this setting, the default source for the Windows Package Manager will be available and cannot be removed.
-- If you disable this setting the default source for the Windows Package Manager will not be available.
+If you do not configure this setting, the default source for the Windows Package Manager will be , and can be removed.
+- If you enable this setting, the default source for the Windows Package Manager will be, and can't be removed.
+- If you disable this setting the default source for the Windows Package Manager won't be available.
@@ -188,6 +188,54 @@ ADMX Info:
+
+
+
+**DesktopAppInstaller/EnableLocalManifestFiles**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether users can install packages with local manifest files.
+
+- If you enable or don't configure this setting, users will be able to install packages with local manifests using the Windows Package Manager.
+- If you disable this setting, users won't be able to install packages with local manifests using the Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Local Manifest Files*
+- GP name: *EnableLocalManifestFiles*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
@@ -219,9 +267,9 @@ ADMX Info:
This policy controls the Microsoft Store source included with the Windows Package Manager.
-If you do not configure this setting, the Microsoft Store source for the Windows Package manager will be available and can be removed.
-- If you enable this setting, the Microsoft Store source for the Windows Package Manager will be available and cannot be removed.
-- If you disable this setting the Microsoft Store source for the Windows Package Manager will not be available.
+If you don't configure this setting, the Microsoft Store source for the Windows Package manager will be available and can be removed.
+- If you enable this setting, the Microsoft Store source for the Windows Package Manager will be , and can't be removed.
+- If you disable this setting the Microsoft Store source for the Windows Package Manager won't be available.
From 01b3e96f94ae34b62eeb995e90382a821bc32dcb Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 29 Aug 2022 19:49:49 +0530
Subject: [PATCH 15/23] Update policy-csp-desktopappinstaller.md
---
.../mdm/policy-csp-desktopappinstaller.md | 253 ++++++++++++++++++
1 file changed, 253 insertions(+)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 3dc17b4037..8851306231 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -43,6 +43,21 @@ manager: aaroncz
DesktopAppInstaller/EnableMicrosoftStoreSource
+
+ DesktopAppInstaller/EnableMSAppInstallerProtocol
+
+
+ DesktopAppInstaller/EnableSettingsCommand
+
+
+ DesktopAppInstaller/EnableWindowsAllowedSources
+
+
+ DesktopAppInstaller/EnableWindowsExperimentalFeatures
+
+
+ DesktopAppInstaller/SetWindowsAutoUpdateInterval
+
@@ -285,6 +300,244 @@ ADMX Info:
+
+**DesktopAppInstaller/EnableMSAppInstallerProtocol**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether users can install packages from a website that is using the `ms-appinstaller` protocol.
+
+- If you enable or do not configure this setting, users will be able to install packages from websites that use this protocol.
+
+- If you disable this setting, users will not be able to install packages from websites that use this protocol.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable MS App Installer Protocol*
+- GP name: *EnableMSAppInstallerProtocol*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
+**DesktopAppInstaller/EnableSettingsCommand**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether users can change their settings. The settings are stored inside of a .json file on the user’s system. It may be possible for users to gain access to the file using elevated credentials. This won't override any policy settings that have been configured by this policy.
+
+- If you enable or do not configure this setting, users will be able to change settings for Windows Package Manager.
+- If you disable this setting, users will not be able to change settings for Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Settings Command*
+- GP name: *EnableSettingsCommand*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
+**DesktopAppInstaller/EnableWindowsAllowedSources**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls additional sources approved for users to configure using Windows Package Manager. If you don't configure this setting, users will be able to add or remove additional sources other than those configured by policy.
+
+- If you enable this setting, only the sources specified can be added or removed from Windows Package Manager. The representation for each allowed source can be obtained from installed sources using winget source export.
+- If you disable this setting, no additional sources can be configured by the user for Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Settings Command*
+- GP name: *EnableSettingsCommand*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
+**DesktopAppInstaller/EnableWindowsExperimentalFeatures**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether users can enable experimental features in Windows Package Manager. Experimental features are used during Windows Package Manager development cycle to provide previews for new behaviors. Some of these experimental features may be implemented prior to the Group Policy settings designed to control their behavior.
+
+- If you enable or do not configure this setting, users will be able to enable experimental features for Windows Package Manager.
+
+- If you disable this setting, users will not be able to enable experimental features for Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager Experimental Features*
+- GP name: *EnableWindowsExperimentalFeatures*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
+
+**DesktopAppInstaller/SetWindowsAutoUpdateInterval**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls the auto-update interval for package-based sources. The default source for Windows Package Manager is configured such that an index of the packages is cached on the local machine. The index is downloaded when a user invokes a command, and the interval has passed (the index is not updated in the background). This setting has no impact on REST-based sources.
+
+- If you enable this setting, the number of minutes specified will be used by Windows Package Manager.
+
+- If you disable or do not configure this setting, the default interval or the value specified in settings will be used by Windows Package Manager.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Set Windows Package Manager Source Auto Update Interval In Minutes*
+- GP name: *SetWindowsAutoUpdateInterval*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
+
+
## Related topics
From 84992f5e56e927b718d5983bf978c25066ad5cf7 Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Tue, 30 Aug 2022 01:07:48 +0530
Subject: [PATCH 16/23] Update policy-configuration-service-provider.md
---
.../policy-configuration-service-provider.md | 27 +++++++++++++++++++
1 file changed, 27 insertions(+)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index c2b0a74b9c..b1a148d288 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -6309,6 +6309,33 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
DesktopAppInstaller/EnableAdditionalSources
+
+ DesktopAppInstaller/EnableAppInstaller
+
+
+ DesktopAppInstaller/EnableDefaultSource
+
+
+ DesktopAppInstaller/EnableLocalManifestFiles
+
+
+ DesktopAppInstaller/EnableMicrosoftStoreSource
+
+
+ DesktopAppInstaller/EnableMSAppInstallerProtocol
+
+
+ DesktopAppInstaller/EnableSettingsCommand
+
+
+ DesktopAppInstaller/EnableWindowsAllowedSources
+
+
+ DesktopAppInstaller/EnableWindowsExperimentalFeatures
+
+
+ DesktopAppInstaller/SetWindowsAutoUpdateInterval
+
### DeviceGuard policies
From cfe8b4b2982b2838d1ff19773f87bd23a1995b63 Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Tue, 30 Aug 2022 01:15:37 +0530
Subject: [PATCH 17/23] Update policy-csp-desktopappinstaller.md
---
windows/client-management/mdm/policy-csp-desktopappinstaller.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 8851306231..c3168d7bb3 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -56,7 +56,7 @@ manager: aaroncz
DesktopAppInstaller/EnableWindowsExperimentalFeatures
- DesktopAppInstaller/SetWindowsAutoUpdateInterval
+ DesktopAppInstaller/SetWindowsAutoUpdateInterval
From d2c0307b457295a95480a42696107e031fd99ccf Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Tue, 30 Aug 2022 01:32:49 +0530
Subject: [PATCH 18/23] Update policies-in-policy-csp-admx-backed.md
---
.../mdm/policies-in-policy-csp-admx-backed.md | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index a1ac2092ba..5249b63e00 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1560,6 +1560,14 @@ ms.date: 10/08/2020
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](./policy-csp-deliveryoptimization.md#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
- [Desktop/PreventUserRedirectionOfProfileFolders](./policy-csp-desktop.md#desktop-preventuserredirectionofprofilefolders)
- [DesktopAppInstaller/EnableAdditionalSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableadditionalsources)
+- [DesktopAppInstaller/EnableAppInstaller](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableappinstaller)
+- [DesktopAppInstaller/EnableLocalManifestFiles](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablelocalmanifestfiles)
+- [DesktopAppInstaller/EnableMicrosoftStoreSource](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemicrosoftstoresource)
+- [DesktopAppInstaller/EnableMSAppInstallerProtocol](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemsappinstallerprotocol)
+- [DesktopAppInstaller/EnableSettingsCommand](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablesettingscommand)
+- [DesktopAppInstaller/EnableWindowsAllowedSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablewindowsallowedsources)
+- [DesktopAppInstaller/EnableWindowsExperimentalFeatures](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablewindowsexperimentalfeatures)
+- [DesktopAppInstaller/SetWindowsAutoUpdateInterval](./policy-csp-desktopappinstaller.md#desktopappinstaller-setwindowsautoupdateinterval)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceIDs](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdeviceids)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdevicesetupclasses)
- [DeviceInstallation/PreventDeviceMetadataFromNetwork](./policy-csp-deviceinstallation.md#deviceinstallationpreventdevicemetadatafromnetwork)
From 234166c3a162f6353fcc1f070c3ae80ce27280d2 Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 5 Sep 2022 01:59:45 +0530
Subject: [PATCH 19/23] Updated
---
.../mdm/policies-in-policy-csp-admx-backed.md | 8 +++----
.../policy-configuration-service-provider.md | 8 +++----
.../mdm/policy-csp-desktopappinstaller.md | 24 +++++++++----------
3 files changed, 20 insertions(+), 20 deletions(-)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index 5249b63e00..2d765eb103 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1564,10 +1564,10 @@ ms.date: 10/08/2020
- [DesktopAppInstaller/EnableLocalManifestFiles](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablelocalmanifestfiles)
- [DesktopAppInstaller/EnableMicrosoftStoreSource](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemicrosoftstoresource)
- [DesktopAppInstaller/EnableMSAppInstallerProtocol](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemsappinstallerprotocol)
-- [DesktopAppInstaller/EnableSettingsCommand](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablesettingscommand)
-- [DesktopAppInstaller/EnableWindowsAllowedSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablewindowsallowedsources)
-- [DesktopAppInstaller/EnableWindowsExperimentalFeatures](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablewindowsexperimentalfeatures)
-- [DesktopAppInstaller/SetWindowsAutoUpdateInterval](./policy-csp-desktopappinstaller.md#desktopappinstaller-setwindowsautoupdateinterval)
+- [DesktopAppInstaller/EnableSettings](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablesettings)
+- [DesktopAppInstaller/EnableAllowedSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableallowedsources)
+- [DesktopAppInstaller/EnableExperimentalFeatures](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableexperimentalfeatures)
+- [DesktopAppInstaller/SourceAutoUpdateInterval](./policy-csp-desktopappinstaller.md#desktopappinstaller-sourceautoupdateinterval)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceIDs](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdeviceids)
- [DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses](./policy-csp-deviceinstallation.md#deviceinstallationallowinstallationofmatchingdevicesetupclasses)
- [DeviceInstallation/PreventDeviceMetadataFromNetwork](./policy-csp-deviceinstallation.md#deviceinstallationpreventdevicemetadatafromnetwork)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index b1a148d288..d4b3c2451f 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -6325,16 +6325,16 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
DesktopAppInstaller/EnableMSAppInstallerProtocol
- DesktopAppInstaller/EnableSettingsCommand
+ DesktopAppInstaller/EnableSettings
- DesktopAppInstaller/EnableWindowsAllowedSources
+ DesktopAppInstaller/EnableAllowedSources
- DesktopAppInstaller/EnableWindowsExperimentalFeatures
+ DesktopAppInstaller/EnableExperimentalFeatures
- DesktopAppInstaller/SetWindowsAutoUpdateInterval
+ DesktopAppInstaller/SourceAutoUpdateInterval
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index c3168d7bb3..090ec26f0a 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -47,16 +47,16 @@ manager: aaroncz
DesktopAppInstaller/EnableMSAppInstallerProtocol
- DesktopAppInstaller/EnableSettingsCommand
+ DesktopAppInstaller/EnableSettings
- DesktopAppInstaller/EnableWindowsAllowedSources
+ DesktopAppInstaller/EnableAllowedSources
- DesktopAppInstaller/EnableWindowsExperimentalFeatures
+ DesktopAppInstaller/EnableExperimentalFeatures
- DesktopAppInstaller/SetWindowsAutoUpdateInterval
+ DesktopAppInstaller/SourceAutoUpdateInterval
@@ -349,7 +349,7 @@ ADMX Info:
-**DesktopAppInstaller/EnableSettingsCommand**
+**DesktopAppInstaller/EnableSettings**
@@ -386,7 +386,7 @@ This policy controls whether users can change their settings. The settings are s
ADMX Info:
- GP Friendly name: *Enable Windows Package Manager Settings Command*
-- GP name: *EnableSettingsCommand*
+- GP name: *EnableSettings*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
@@ -396,7 +396,7 @@ ADMX Info:
-**DesktopAppInstaller/EnableWindowsAllowedSources**
+**DesktopAppInstaller/EnableAllowedSources**
@@ -433,7 +433,7 @@ This policy controls additional sources approved for users to configure using Wi
ADMX Info:
- GP Friendly name: *Enable Windows Package Manager Settings Command*
-- GP name: *EnableSettingsCommand*
+- GP name: *EnableAllowedSources*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
@@ -443,7 +443,7 @@ ADMX Info:
-**DesktopAppInstaller/EnableWindowsExperimentalFeatures**
+**DesktopAppInstaller/EnableExperimentalFeatures**
@@ -481,7 +481,7 @@ This policy controls whether users can enable experimental features in Windows P
ADMX Info:
- GP Friendly name: *Enable Windows Package Manager Experimental Features*
-- GP name: *EnableWindowsExperimentalFeatures*
+- GP name: *EnableExperimentalFeatures*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
@@ -491,7 +491,7 @@ ADMX Info:
-**DesktopAppInstaller/SetWindowsAutoUpdateInterval**
+**DesktopAppInstaller/SourceAutoUpdateInterval**
@@ -529,7 +529,7 @@ This policy controls the auto-update interval for package-based sources. The def
ADMX Info:
- GP Friendly name: *Set Windows Package Manager Source Auto Update Interval In Minutes*
-- GP name: *SetWindowsAutoUpdateInterval*
+- GP name: *SourceAutoUpdateInterval*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
From 395f35ec4c3e58e4c57d1cb19c6cd12bf663c6c9 Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 5 Sep 2022 02:10:03 +0530
Subject: [PATCH 20/23] Update policy-csp-desktopappinstaller.md
---
windows/client-management/mdm/policy-csp-desktopappinstaller.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index 090ec26f0a..a39d734dd8 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -112,6 +112,7 @@ ADMX Info:
+
**DesktopAppInstaller/EnableAppInstaller**
From f9b60f994ddf84f0303f728acf8b873ab7f60fbc Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Mon, 5 Sep 2022 10:57:15 +0530
Subject: [PATCH 21/23] Create policy-csp-personaldataencryption.md
---
.../mdm/policies-in-policy-csp-admx-backed.md | 1 +
.../policy-configuration-service-provider.md | 3 ++
.../mdm/policy-csp-desktopappinstaller.md | 49 +++++++++++++++++++
3 files changed, 53 insertions(+)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index 2d765eb103..aa15270570 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -1562,6 +1562,7 @@ ms.date: 10/08/2020
- [DesktopAppInstaller/EnableAdditionalSources](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableadditionalsources)
- [DesktopAppInstaller/EnableAppInstaller](./policy-csp-desktopappinstaller.md#desktopappinstaller-enableappinstaller)
- [DesktopAppInstaller/EnableLocalManifestFiles](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablelocalmanifestfiles)
+- [DesktopAppInstaller/EnableHashOverride](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablehashoverride)
- [DesktopAppInstaller/EnableMicrosoftStoreSource](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemicrosoftstoresource)
- [DesktopAppInstaller/EnableMSAppInstallerProtocol](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablemsappinstallerprotocol)
- [DesktopAppInstaller/EnableSettings](./policy-csp-desktopappinstaller.md#desktopappinstaller-enablesettings)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index d4b3c2451f..2728ba4aa7 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -6318,6 +6318,9 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
DesktopAppInstaller/EnableLocalManifestFiles
+
+ DesktopAppInstaller/EnableHashOverride
+
DesktopAppInstaller/EnableMicrosoftStoreSource
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index a39d734dd8..b1273c99a9 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -40,6 +40,9 @@ manager: aaroncz
DesktopAppInstaller/EnableLocalManifestFiles
+
+ DesktopAppInstaller/EnableHashOverride
+
DesktopAppInstaller/EnableMicrosoftStoreSource
@@ -252,6 +255,52 @@ ADMX Info:
+
+**DesktopAppInstaller/EnableHashOverride**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Windows SE|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+
+This policy controls whether Windows Package Manager can be configured to enable the ability to override `SHA256` security validation in settings. Windows Package Manager compares the installer after it has downloaded with the hash provided in the manifest.
+
+- If you enable or do not configure this setting, users will be able to enable the ability to override `SHA256` security validation in Windows Package Manager settings.
+
+- If you disable this setting, users will not be able to enable the ability to override SHA256 security validation in Windows Package Manager settings.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Enable Windows Package Manager*
+- GP name: *EnableHashOverride*
+- GP path: *Administrative Templates\Windows Components\App Package Deployment*
+- GP ADMX file name: *AppxPackageManager.admx*
+
+
+
+
From bad9bc265ec0a1abe2411b6972bb6bc525db067b Mon Sep 17 00:00:00 2001
From: Nimisha Satapathy
Date: Wed, 7 Sep 2022 02:14:41 +0530
Subject: [PATCH 22/23] Update policy-csp-desktopappinstaller.md
---
windows/client-management/mdm/policy-csp-desktopappinstaller.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index b1273c99a9..ede017ee8b 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -293,7 +293,7 @@ This policy controls whether Windows Package Manager can be configured to enable
ADMX Info:
-- GP Friendly name: *Enable Windows Package Manager*
+- GP Friendly name: *Enable App Installer Hash Override*
- GP name: *EnableHashOverride*
- GP path: *Administrative Templates\Windows Components\App Package Deployment*
- GP ADMX file name: *AppxPackageManager.admx*
From 93c1aa6b51d8e79d379a9c317811d2a15deaceb3 Mon Sep 17 00:00:00 2001
From: Stephanie Savell <101299710+v-stsavell@users.noreply.github.com>
Date: Fri, 9 Sep 2022 10:40:57 -0500
Subject: [PATCH 23/23] Update
windows/client-management/mdm/policy-csp-desktopappinstaller.md
---
windows/client-management/mdm/policy-csp-desktopappinstaller.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/windows/client-management/mdm/policy-csp-desktopappinstaller.md b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
index ede017ee8b..fda0ebbc15 100644
--- a/windows/client-management/mdm/policy-csp-desktopappinstaller.md
+++ b/windows/client-management/mdm/policy-csp-desktopappinstaller.md
@@ -191,7 +191,7 @@ ADMX Info:
This policy controls the default source included with the Windows Package Manager.
-If you do not configure this setting, the default source for the Windows Package Manager will be , and can be removed.
+If you do not configure this setting, the default source for the Windows Package Manager will be and can be removed.
- If you enable this setting, the default source for the Windows Package Manager will be, and can't be removed.
- If you disable this setting the default source for the Windows Package Manager won't be available.