Preventing Installing Microsoft Store Apps for Child Accounts

[LL_VA]

I've researched this pretty thoroughly and there are several posts already about it. The other posts I think are pretty clear about what they're trying to achieve but it seems that the responses don't understand the current Windows ecosystem and tools available (ex: differences between Windows Home and Pro Editions vs. Enterprise, and the ability to use AppLocker or Group Policy to prevent installs from the store).


I have used two leading parental monitoring applications for my 6 year old son but neither prevents installs from the Microsoft store.


Let me summarize the issue and what I have found:

• My child has the ability to download and install free apps/games/etc from the Microsoft Store and I (and others who have posted) want this turned off. My child is under Microsoft Family Link and I manage his account that way.
• To be clear: my child will go under his heavily locked down account and still be able to install games and play them. We don't want this at all. It turns into an issue because it alters his behavior, making him irritable and prone to tantrums when he has to stop.
• I think everyone knows the difference between and Administrator and Standard account and that a Standard account can't install software. Let's be clear, though: even with a Standard account you can install software from the Microsoft Store.
• You can prevent a child from viewing age inappropriate apps down to 3 years old, but what I and others want is to completely turn off or completely turn on the ability to authorize/approve ALL installs from the Store.
• The ability to use AppLocker, Registry edits, or Group Policy to disable the store is not something allowed in Windows 10 Home or Pro. You can do so in Enterprise and Education editions, I believe, but this isn't much good for everyday folks. Yesterday, for example, I went to Best Buy and the Windows machines all seemed to be running Windows 10 Home. I run Windows 10 Pro on my current machine but Microsoft changed their approach a few years ago so things like using Group Policy to block the Store do not work. Even if you could disable the store that apparently prevents updates from installed apps. This is a security risk.
• What I and others want is a way, like Apple and Google, to have any and all store app installs approved by parents! Microsoft Family Link does not currently have this functionality. Please don't say you can block individual apps through Family Link. I know this, but it doesn't solve the issue. I can't play a game of whack-a-mole after the installation. Prevent installations without permission before installation!

So, my question:

• If there is a way to prevent or to require approval for all applications/games/etc from the Microsoft Store on a Windows 10 Home or Pro OS machine, please advise. I would like to approve installs but I will take just turning the store off. There are only a handful of reasons/applications/sites that my 6 year old has any need to visit or use.

I purchased a Chromebook 2 weeks ago for the first time for my older child and it works exactly as I would like from an app install perspective - I have to approve any installation, along with having other handy parental controls. I have just purchased a second one for my 6 year old child due to the parental controls Google offers. I looked heavily at Windows laptops but could not get over the issue I've outlined above so went with another Chromebook. However, I still have our home desktop which is running Windows and where this is still an issue.


Thanks!

Continue reading...