Skip to content

Document Group Policy to prevent users from uninstalling apps from Start #507

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Roy (RDMacLachlan) wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Document Group Policy to prevent users from uninstalling apps from Start #507

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
459eb25
Document Group Policy to prevent users from uninstalling apps from Start
RDMacLachlan Aug 25, 2026
f19296f
Clarify Start uninstall policy registry details
RDMacLachlan Aug 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 32 additions & 1 deletion msix-src/group-policy-msix.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: How Group Policy works with packaged apps
description: Describes how Group Policy works with apps that are converted to MSIX.
ms.date: 04/12/2019
ms.date: 08/26/2026
ms.topic: article
keywords: msix
---
Expand Down Expand Up @@ -38,6 +38,37 @@ This policy denies or allows access to the Store application. If you enable this
* **Registry:** `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStoreRemoveWindowsStore REG_DWORD` or `HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsStoreRemoveWindowsStore REG_DWORD`
* **App updates:** If configured in the computer context, this policy turns off app updates.

### Prevent users from uninstalling applications from Start

Administrators can use the **Prevent users from uninstalling applications from Start**
policy to remove the Start menu uninstall command for applications. This policy
controls the Start menu user experience. It doesn't uninstall an MSIX package and
isn't a blanket control that prevents every package-removal path.

* **GPO:** `Computer Configuration\Administrative Templates\Start Menu and Taskbar`
or `User Configuration\Administrative Templates\Start Menu and Taskbar`
* **Computer registry policy:** Key
`HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer`; value name
`NoUninstallFromStart`; type `REG_DWORD`.
* **User registry policy:** Key
`HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer`; value name
`NoUninstallFromStart`; type `REG_DWORD`.
* **Registry value data:** When Group Policy applies this ADMX-backed setting, it
sets the value to `1` when the policy is enabled and `0` when the policy is
disabled.
* **Start menu uninstall:** If enabled, users can't uninstall apps from Start. If
disabled or not configured, users can access the uninstall command from Start.
* **Scope and limitations:** This policy is documented for the Start menu
uninstall command. It doesn't document a block for uninstall initiated from
**Settings**, PowerShell commands such as `Remove-AppxPackage`, or management
tools. Administrators and device management solutions can still remove MSIX
packages by using an authorized removal path.

For more information, see
[Start menu policy settings](/windows/configuration/start/policy-settings#prevent-users-from-uninstalling-applications-from-start)
and
[ADMX_StartMenu Policy CSP](/windows/client-management/mdm/policy-csp-admx-startmenu#nouninstallfromstart).

### Overview of both Store signed and Trusted non-Store apps on Windows 10 2004 Enterprise
The table below demonstrates what happens when *BlockNonAdminUserInstall* policy is **Enabled**, *AllowAllTrustedApps* is **Enabled** and *AllowDevelopmentWithoutDevLicense* is **Enabled**

Expand Down