Policy

Not allow per-user unsigned packages to install by default (requires explicitly allow per install)

Not allow per-user unsigned packages to install by default (requires explicitly allow per install) If you enable this policy, the AllowUnsigned option defaults to 'false'. If you disable this policy, the AllowUnsigned option defaults to 'true'. Default is 'disabled' (key not present).

Policy
PackMicrosoft Windows
CategoryWindows Components / App Package Deployment
Policy ID3e56c5acdd61
Internal nameDisablePerUserUnsignedPackagesByDefault

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\Appx\DisablePerUserUnsignedPackagesByDefault (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\Appx\DisablePerUserUnsignedPackagesByDefault (disabled) = 0

Policy notes

Not allow per-user unsigned packages to install by default (requires explicitly allow per install) If you enable this policy, the AllowUnsigned option defaults to 'false'. If you disable this policy, the AllowUnsigned option defaults to 'true'. Default is 'disabled' (key not present).

Related policies

Allow a Windows app to share application data between usersAllow all trusted apps to installAllow deployment operations in special profilesAllowed package family names for non-admin user installAllows development of packaged Microsoft Store apps and installing them from an integrated development environment (IDE)Archive infrequently used appsDisable installing Windows apps on non-system volumes