Using the Windows Store in an Enterprise Environment

In our environment, we are currently blocking the Windows Store through Group Policy. However, this has lead to some issues with certain Windows Store/UWP apps (namely Photos and Sticky Notes) intermittently becoming corrupted. While we've chalked that up to the applications attempting to update from the Store and being unable to do so, we're not entirely sure if that is the case or if it is caused by another issue with our environment. We can generally get around it by resetting the app through PowerShell, but as that's a rather adverse user experience, we're looking to unblock the Store for users. However, there are some concerns about the Store being used for many non-Enterprise related apps (as well as the fact that it advertises many games on the launch page).

The question is essentially two fold:

For those of you who are currently blocking the Windows store, are you experiencing similar issues with Windows Store applications?
For those of you who are not blocking the Windows store, what sort of measures in place (if any) to govern which applications users can install from the store?

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 65

Cliff GaliherCommented: 2017-04-11

1) no, not seeing that issue.

2) for tightly controlled environments, we disable the store and remove most, if not all, modern apps, and use applocker to prevent applications from running. For most environments though, we allow apps to be installed. Store apps are sandboxed, and (presumably) screened to even be in the store. So the security risk is minimal as for non-work apps getting installed, we view that as a policy/HR problem. Some organizations don't mind personal apps as they foster good work/life balance. But out right games and such...even if blocked, if a user is willing to play games on work time, they'll find a way. They'll sit at their desk and play on their iPhone. Or find online web games (and https is the ultimate way to bypass most firewall blocks.) So blocking store games is not an effective way to deal with an HR issue.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 11

Colleen Kayter4D AssetsCommented: 2017-04-11

Blocking the store also blocks useful tools such as Translator, M-W Dictionary, and Sway. I agree with Cliff that it's really about company policy, not group policy. Trust your users to follow company policy regarding computer usage just as they do regarding alcohol at work.

As a former sys admin with 65 users, I had a lot more trouble with them opening malicious e-mail attachments than installing games on their computers.

LVL 38

Seth SimmonsSr. Systems AdministratorCommented: 2018-02-02

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Cliff Galiher (https:#a42088693)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer

Using the Windows Store in an Enterprise Environment

Who is Participating?