Configure App Install Control

App Install Control is a feature of Windows Defender SmartScreen that helps protect PCs by allowing users to install apps only from the Store. SmartScreen must be enabled for this feature to work properly.

If you enable this setting, you must choose from the following behaviors:

- Turn off app recommendations

- Show me app recommendations

- Warn me before installing apps from outside the Store

- Allow apps from Store only

If you disable or don't configure this setting, users will be able to install apps from anywhere, including files downloaded from the Internet.

Supported on: At least Windows Server, Windows 10 Version 1809

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
Value NameConfigureAppInstallControlEnabled
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Pick one of the following settings:


  1. Turn off app recommendations
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
    Value NameConfigureAppInstallControl
    Value TypeREG_SZ
    ValueAnywhere
  2. Show me app recommendations
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
    Value NameConfigureAppInstallControl
    Value TypeREG_SZ
    ValueRecommendations
  3. Warn me before installing apps from outside the Store
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
    Value NameConfigureAppInstallControl
    Value TypeREG_SZ
    ValuePreferStore
  4. Allow apps from Store only
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender\SmartScreen
    Value NameConfigureAppInstallControl
    Value TypeREG_SZ
    ValueStoreOnly


smartscreen.admx

Administrative Templates (Computers)

Administrative Templates (Users)