SOLVED: How To Disable the Public Microsoft Store but Allow Your Corporate Store

UPDATE OCT 18 2018 – You CAN now use a GPO to block the public Microsoft Store but keep your private corporate Store.  See our short explanation HERE.

After working on setting up a private Microsoft Business Store (businessstore.microsoft.com) I was shocked to find that I could not disable the Public Microsoft Store through any of the settings.  I put a few hours into searching and reading but could not even find someone saying it cannot be done, so I gave up and called support.

The support tech thought that the way around this was to:

1. Disable the STORE app in Windows 10
2. Send users to the companies private store URL: businessstore.microsoft.com

However, when users click a link for an app, it tries to launch the the Windows 10 STORE app.  So that did not work either.

After some research the tech confirmed that the only way to block the public Store but keep your users with access to your private “Microsoft Store For Business” is through InTune.

For me that was the end of the road as my client is not going to license InTune.  However, in case you want to know how to set it up, read on!

InTune is Microsoft’s web version of System Center Configuration Manager which controls such things as Windows Updates, Access Policies and Remote Wiping of (stolen?) devices.  As of spring 2016, it also allows admins to control access to the public Microsoft Store:

Now it’s possible to disable the Windows 10 public store while keeping access to the business store (Windows Store for Business).

To block the public store, you need to create a new custom Windows 10 policy in Microsoft Intune (we create a new one because this one will target users and not devices).

• Connect to Microsoft Intune management portal
• From “Policy“, create a new “Custom Configuration” policy for Windows 10.
• Create a new OMA-URI setting. You will find details on the CSP policy reference page.
  • OMA-URI: ./User/Vendor/MSFT/Policy/Config/ApplicationManagement/RequirePrivateStoreOnly
  • Value: 1
• Then validate the policy.
• And deploy that policy to a user collection. Here is the end result after you refresh MDM policy on a Windows 10 computer: public store’s tabs has disappear but business store is still there

SOURCE