How to disable winget on local user?

Lei 0 Reputation points
2026-09-10T03:22:01.63+00:00

Hi,

We disabled Microsoft store via intune's configurations but learnt that users even without admin rights could use powershell and use winget to install any apps.

Is there a way to prevent the user to grab any apps that they want?

Microsoft 365 and Office | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh Srinivasan 86,840 Reputation points Independent Advisor
    2026-09-10T04:01:50.02+00:00

    Hi Lei,

    Please use the "Enable App Installer" GPO. You may need to download the Desktop App Installer ADMK file.

    This policy controls whether Windows Package Manager can be used by users. Users will still be able to execute the winget command. The default help will be displayed, and users will still be able to execute winget -? to display the help as well. Any other command will result in the user being informed the operation is disabled by Group Policy.

    If you enable or do not configure this setting, users will be able to use the Windows Package Manager.

    If you disable this setting, users will not be able to use the Windows Package Manager.

    Reference: Manage Windows Package Manager with Group Policy | Microsoft Community Hub

    Download Administrative Template files (ADMX/ADML) for the Windows Package Manager from Official Microsoft Download Center

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.