This tutorial will show you how to choose where apps can be installed from for all users in Windows 11.
To help protect your PC and keep it running smoothly, Microsoft recommends only installing apps from the Microsoft Store. You can choose where you can get apps from and if you want to see app recommendations when you try to install an app from outside of the Microsoft Store.
The Application Installation Control feature let's you choose to get apps from:
- Anywhere - Users will be able to install both desktop and Store apps without getting a message dialog.
- Anywhere, but let me know if there's a comparable app in the Microsoft Store
- Anywhere, but warn me before installing an app that's not from the Microsoft Store - Users will be able to install both desktop and Store apps. Users will get a "The app you're trying to install isn't a Microsoft-verified app" message dialog when trying to install a desktop app to see if they want to visit the Store for more apps.
- The Microsoft Store only - Users will only be able to install apps from the Store. If users try to install a desktop app, they will get a "The app you're trying to install isn't a Microsoft-verified app" message dialog to visit the Store for more apps. Limiting installations to apps from the Store helps to keep you PC safe and reliable. Users will still be able to run desktop apps that were previously installed.
Change your app recommendation settings in Windows - Microsoft Support

You must be signed in as an administrator to change your app recommendation settings in Windows.
If you have a Windows 11 in S mode edition installed, you will only be able to install apps from The Microsoft Store only until you switch out of S mode.
- Option One: Choose where to get apps in Settings
- Option Two: Choose where to get apps using REG file
- Option Three: Choose where to get apps via Policy in Local Group Policy Editor
- Option Four: Choose where to get apps via Policy using REG file
EXAMPLE: App recommendation warnings
1 Open Settings (Win+I).
2 Click/tap on Apps on the left side, and click/tap on Advanced app settings or Apps & features > More settings on the right side. (see screenshot below)
3 Select Anywhere (default), Anywhere, but let me know if there's a comparable app in the Microsoft Store, Anywhere, but warn me before installing an app that's not from the Microsoft Store, or The Microsoft Store only for what you want from the Choose where to get apps drop down. (see screenshot below)
4 You can now close Settings if you like.
1 Do step 2 (Anywhere), step 3 (Recommendations), step 4 (PreferStore), or step 5 (StoreOnly) below for what you want.
This is the default setting.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AicEnabled"="Anywhere"
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AicEnabled"="Recommendations"
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AicEnabled"="PreferStore"
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AicEnabled"="StoreOnly"
6 Save the REG file to your desktop.
7 Double click/tap on the downloaded REG file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 You can now delete the downloaded REG file if you like.
The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.
All editions can use Option Four to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)
3 In the right pane of Explorer in the Local Group Policy Editor, double click/tap on the Configure App Install Control policy to edit it. (see screenshot above)
4 Do step 5 (default) or step 6 (specify) below for what you want.
This is the default setting to allow using Option One and Option Two.
This will override and prevent using Option One and Option Two.
- Turn off app recommendations
- Show me app recommendations
- Warn me before installing apps from outside the Store
- Allow apps from the Store only
7 Close the Local Group Policy Editor.
1 Do step 2 (Anywhere), step 3 (Recommendations), step 4 (PreferStore), step 5 (StoreOnly), step 6 (default) below for what you want.
This will override and prevent using Option One and Option Two.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen]
"ConfigureAppInstallControlEnabled"=dword:00000001
"ConfigureAppInstallControl"="Anywhere"
This will override and prevent using Option One and Option Two.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen]
"ConfigureAppInstallControlEnabled"=dword:00000001
"ConfigureAppInstallControl"="Recommendations"
This will override and prevent using Option One and Option Two.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen]
"ConfigureAppInstallControlEnabled"=dword:00000001
"ConfigureAppInstallControl"="PreferStore"
This will override and prevent using Option One and Option Two.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen]
"ConfigureAppInstallControlEnabled"=dword:00000001
"ConfigureAppInstallControl"="StoreOnly"
This is the default setting to allow using Option One and Option Two.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen]
"ConfigureAppInstallControlEnabled"=-
"ConfigureAppInstallControl"=-
7 Save the REG file to your desktop.
8 Double click/tap on the downloaded REG file to merge it.
9 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
10 You can now delete the downloaded REG file if you like.
That's it,
Shawn Brink
Attachments
-
Install_apps_from_Anywhere.reg570 bytes · Views: 644
-
Install_apps_from_Anywhere-but_let_know_if_comparable_app_in_Microsoft_Store.reg584 bytes · Views: 315
-
Install_apps_from_Anywhere-but_warn_before_installing_app_not_from_Microsoft_Store.reg576 bytes · Views: 299
-
Install_apps_from_Microsoft_Store_only.reg572 bytes · Views: 270
-
Default_Do_not_specify.reg682 bytes · Views: 232
-
Policy_Install_apps_from_Anywhere.reg726 bytes · Views: 318
-
Policy-Install_apps_from_Anywhere-but_let_know_if_comparable_app_in_Microsoft_Store.reg740 bytes · Views: 235
-
Policy-Install_apps_from_Anywhere-but_warn_before_installing_app_not_from_Microsoft_Store.reg732 bytes · Views: 221
-
Policy-Install_apps_from_Microsoft_Store_only.reg728 bytes · Views: 236