Microsoft has unveiled a significant enhancement for IT administrators managing Windows 11 Enterprise and Education devices. The introduction of a new app management policy allows for the removal of pre-installed Microsoft Store apps, commonly referred to as in-box apps. This functionality is now accessible for devices running Windows 11 Enterprise 25H2 and Windows 11 Education 25H2 through various management tools, including the configuration service provider (CSP), Group Policy Object (GPO), and the Microsoft Intune settings catalog.
Streamlined App Management
This innovative policy simplifies the process of app management by eliminating the need for custom Windows installation images and complex scripting. Administrators can now select from a predefined list of pre-installed Microsoft Store apps to remove them from their systems efficiently. Once the policy is applied, it is automatically enforced, ensuring that removed packages and any associated local app data are deprovisioned and deleted from the device.
As Microsoft clarified, the policy is disabled by default, requiring administrators to enable it explicitly. It is compatible with both Group Policy and mobile device management (MDM) solutions, including Microsoft Intune. “Starting this month, you can remove select in-box apps using straightforward policy on Windows 11 Enterprise or Windows 11 Education, version 25H2. The new policy, called Remove default Microsoft Store packages from the system, is disabled by default,” Microsoft stated.
Implementation Steps for Microsoft Intune
For administrators looking to implement this new policy using Microsoft Intune, the following steps are recommended:
- In the Microsoft Intune admin center, navigate to Devices > Manage devices > Configuration > Create > New policy to initiate a settings catalog policy.
- Configure the settings as follows:
- Category: Administrative TemplatesWindows ComponentsApp Package Deployment
- Setting name: Remove default Microsoft Store packages from the system.
- Value: Enabled
- Set the toggle to True for each app you wish to remove.
- Assign the policy to the desired group or groups of devices.
A comprehensive list of supported apps and detailed instructions for applying the policy to individual devices via the Local Group Policy Editor or to multiple Active Directory-joined devices can be found in the official documentation.
Microsoft further emphasized the advantages of this new policy, stating, “If you’ve ever needed to remove pre-installed Microsoft Store apps, you might have encountered scripts that break when apps change, making your job more time-consuming. The new policy lets you select and remove apps according to your organization’s requirements with reduced operational overhead.”
This announcement follows several recent enhancements from Microsoft, including the introduction of hotpatching support for Windows 11 Enterprise in April and the waiving of fees for Windows developers publishing applications on the Microsoft Store in September. Additionally, Microsoft has recently announced the general availability of Windows Backup for Organizations, an enterprise-grade backup tool designed to facilitate the transition to Windows 11 and simplify backup processes.
