After my last blog – Only display the private store within the Windows Store app (Windows 10, 1511) – there came a lot of inputs, that users can still install APPs with their private Microsoft Account. This is true, because the described setting is only deactivating the menus in the store app. So a user can add his Microsoft Account and add APPs (not as easy as usual, because he cannot see them directly in the APP).
BUT, there is a way through MDM or WMI to deactivate the Microsoft Account for Store APPs. Take care, this is not the setting “Users can’t add or log on with Microsoft accounts” (Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options)! This only prohibits to login with a Microsoft Account to the Windows 10 device!
A lot of customers are interested to use the Microsoft Business Store for Windows 10, a private store hosted by Microsoft (description about the business store you can find here: Implement Microsoft Windows Store for Business and Windows 10 Mobile). One of the first question is always: Can we disable the Microsoft Store APP but enable the Business Store, where we can manage the APPs? The answer is: YES, you can –> you cannot disable the Store APP, because the Windows Store and the Business Store are the same APP (Business store only adds an additional menu when logged in with a Workplace or School Account). But you can configure the APP to only show your business store menu which is described in this post.