How to uninstall Microsoft Store app on a remote computer?

Question

How to uninstall Microsoft Store app on a remote computer?

Webb, Mike 80

I'm a Tier II tech with several tickets to uninstall Microsoft Store apps. The user's have been unresponsive to my requests for a remote session so I'm trying to find a way to use PowerShell. I've tried using the Remove-AppxPackage -Package "Package full name" but it fails. I've tried it by connecting using RDC and also trying it with Invoke-Command to remotely connect to and then uninstall it. Both ways fail; I get a message that I don't have permission. I'm using a CyberArk account that's a member of a group that is in the local admin group of all computers. What am I missing? And what works for you?

0 comments

3 answers

Your answer

Answer 1

HLBui 6,350 Independent Advisor

Hi Webb, Mike

The Remove-AppxPackage cmdlet only works in the context of the logged-in user session, so if you’re trying to run it remotely or under a different account, it’ll throw those permission errors even if you’re technically an admin. That’s why RDC or Invoke-Command isn’t cutting it. The trick is that Microsoft Store apps are user-scoped, not machine-scoped, so you need to run the removal in the actual user’s context.

What usually works is using Remove-AppxProvisionedPackage for system-wide removal, which strips the app from the image so new users don’t get it, and then pairing that with Remove-AppxPackage inside the user’s session for existing installs. If the users aren’t responsive, you can script it with PsExec or Intune/Endpoint Manager so it runs as them. CyberArk or admin accounts won’t bypass the fact that the app is tied to the user profile.

Another option is to use Group Policy or Intune app removal policies, which are cleaner for enterprise environments. That way you don’t have to chase down individual sessions.

So bottom line: you’re not missing permissions, you’re just fighting the user-context requirement. Use provisioned package removal for future logins, and push user-context removal via a management tool for current installs. If this clears things up, please hit “accept answer” so we know it helped and if you need more information, feel free to leave a message. We are happy to help!

Webb, Mike 80 Reputation points

2026-05-19T10:47:28.59+00:00

Thanks for this; I can see the 'how' and 'why' much better now. I like the idea of using PsExec. All I'd need is the username for the script then?
HLBui 6,350 Reputation points Independent Advisor

2026-05-19T15:55:09.4233333+00:00

Hi Webb, Mike

Actually you don’t need the end user’s username for the script; what you need is to run it under an account that has local admin rights (your CyberArk account should be fine). From there, you can target the removal using Remove-AppxProvisionedPackage so it applies system-wide, or if you’re cleaning up a specific profile, you can point PsExec to run PowerShell in that user’s context

A common trick is psexec -i -s powershell.exe which runs as SYSTEM, then you can manage provisioned packages without worrying about user logins. If you’re trying to nuke apps from multiple profiles, you’ll want to script a loop through the user directories and apply the removal. Just keep in mind that some built-in apps are protected and may need DISM instead.
HLBui 6,350 Reputation points Independent Advisor

2026-05-21T06:08:50.72+00:00

Good day Webb, Mike

Don't forget to share your experience with "Accept the answer" . That others in community with similar issues can benefit from the guidance. Thank you!

Answer 2

Remove-AppxPackage runs in the security and session context of the user whose profile owns the app. Being a local administrator on the machine is not sufficient if the app is installed only for a specific user and the command is executed in a different session.

To remove Microsoft Store apps remotely in a supported way, use one of these approaches:

Remove for all users on the device (if the app is provisioned or installed for everyone):
- Run PowerShell in an elevated session on the target machine (or via a remote management tool that runs in the system context) and use the -AllUsers switch:
```
     Remove-AppxPackage -Package "<PackageFullName>" -AllUsers
```
- This removes the specified app package from all user accounts on that device.
Remove for a specific user profile:
- Run PowerShell in the context of that user (for example, by having that user signed in and starting an elevated PowerShell in their session, or using a management tool that can impersonate that user) and then run:
```
     Remove-AppxPackage -Package "<PackageFullName>"
```
- Alternatively, if you can target by user name:
```
     Remove-AppxPackage -Package "<PackageFullName>" -User "DOMAIN\\UserName"
```
Use policy-based removal for managed fleets (recommended at scale):
- Configure the Remove default Microsoft Store packages from the system policy via:
  - Group Policy: Computer Configuration > Administrative Templates > Windows Components > App Package Deployment > Remove Default Microsoft Store packages from the system.
  - Intune: Settings catalog policy with the same setting under Administrative Templates\Windows Components\App Package Deployment.
- For additional apps, add their Package Family Names (PFNs) to the policy:
```
     Get-AppxPackage *AppName* | Select-Object PackageFamilyName
```
- The policy applies at user provisioning or sign-in and removes the targeted apps without needing an interactive remote session.

If Invoke-Command fails with a permissions error despite local admin membership, the issue is typically that the command is not running in the target user’s session or that the app is user-scoped only. Using -AllUsers from an elevated/system context or applying a device-level policy avoids that limitation.

References:

Answer 3

I worked with CoPilot with what I needed and your input to this post to come up with something and this worked. Look it over to see if it can be further improved:

$script = @"

$pkg=',FullPackageName> Remove-AppxPackage -Package $pkg -AllUsers -ErrorAction SilentlyContinue

Remove-AppxProvisionedPackage -Online -PackageName $pkg -ErrorAction SilentlyContinue

Start-Sleep -Seconds 2

if (-not (Get-AppxPackage -AllUsers | Where-Object PackageFullName -eq $pkg)) {

Write-Output 'SUCCESS: Package removed'

exit 0

} else {

Write-Output 'FAIL: Package still present'

exit 1

}

"@

.\psexec.exe \<RemoteComputerName> -s powershell.exe -ExecutionPolicy Bypass -Command $script

.\psexec.exe \<RemoteComputerName> -s powershell.exe -ExecutionPolicy Bypass -Command "Get-AppxPackage -AllUsers | Where-Object Name -like 'python'"

Share via

How to uninstall Microsoft Store app on a remote computer?

3 answers

Your answer