Microsoft Store Blocked by Your Administrator? What You Can Do

"Microsoft Store is blocked. Check with your IT or system administrator." If you see this on a work or school PC, the Store has been switched off on purpose. Older versions of this article showed a way around the block using a third-party download site. I have taken that down: sideloading app packages from outside sites on a managed PC breaks company policy, can install tampered software, and as someone who manages devices for a living, I would not want my own users doing it. Here is what actually works instead, for users and for admins.

Quick answer

On a work PC, open Company Portal and install the app from there, or ask IT to make it available. If the Store is blocked on your own personal PC, a policy or registry setting left behind by a tweak tool or an old work account is the usual cause; check Access work or school, run wsreset, and remove the RemoveWindowsStore policy. Admins can block the Store app while still deploying approved Store apps through Intune.

Why the Microsoft Store is blocked

• Security: fewer apps installed means fewer things to patch and fewer ways in for malware.
• Licensing and support: IT only supports apps it has approved and tested.
• Data protection: some apps sync files or contacts to services the company does not control.

The block is normally set with Intune or Group Policy (Turn off the Store application), so it comes back even if you change it locally.

On a work or school PC: the legitimate options

1. Check Company Portal first. Search for Company Portal in the Start menu. Many organizations publish approved apps there, including Store apps such as WhatsApp or Microsoft To Do, and you can install them yourself without admin rights.
2. Ask IT for the app. Tell them the app name and why you need it for work. Admins can add a Store app to Company Portal in a few minutes.
3. Use the web version. Many apps, such as WhatsApp, Spotify and Netflix, work just as well in the browser.

Sideloading packages from third-party sites usually fails anyway on managed PCs, because sideloading is blocked too, and it can get your device flagged as non-compliant.

On your own PC: why the Store says it is blocked

If it is your personal computer and you never joined it to a company, the message usually comes from leftovers:

1. An old work account. Open Settings > Accounts > Access work or school. If a work or school account is connected and you no longer need it, disconnect it. That account may be pushing the policy.
2. A debloat or privacy tool. Many "optimiser" scripts disable the Store. Check the registry key below and delete the RemoveWindowsStore value if it exists, then restart:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\WindowsStore

3. A broken Store. Press Win + R and run wsreset. If the Store is missing completely, reinstall it from an admin PowerShell:

Get-AppxPackage -AllUsers Microsoft.WindowsStore |
  ForEach-Object { Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" }

On a personal PC you can also install many apps with winget, which uses the Store and other trusted sources: winget install --id 9WZDNCRFJ3TJ --source msstore installs Netflix, for example. Search with winget search appname.

For IT admins: block the Store, still deliver Store apps

Blocking the Store does not have to mean users cannot get Store apps. This is the setup I would recommend:

• Block the Store app for users with the Intune setting or the Group Policy Turn off the Store application.
• Add the apps people actually need in Intune as Microsoft Store app (new). They install through the Store engine and keep updating, even with the Store UI blocked.
• Make them Available in Company Portal so users can self-serve, and Required for apps everyone needs.
• Block sideloading of untrusted packages, so third-party download sites cannot get around your policy.

If a device does not pick up a new app, force a sync: see how to force an Intune sync on Windows. For scripting the checks above, see automating Windows admin tasks with PowerShell.

Frequently asked questions

Why does Microsoft Store say it is blocked by my administrator?

Your organization has turned off the Store with Intune or Group Policy. On a personal PC, the same message can come from an old work account, a privacy or debloat tool, or a leftover RemoveWindowsStore registry value.

How do I install apps when the Microsoft Store is blocked at work?

Use Company Portal, which lists the apps your organization has approved, or ask IT to add the app you need. Many apps also have a web version that works in the browser.

Is it safe to download Store apps from third-party sites?

Not on a work PC. It breaks company policy, sideloading is often blocked anyway, and you cannot be sure the package has not been modified. On a personal PC, use the Store, winget or the developer site.

How do I unblock the Microsoft Store on my own PC?

Disconnect any old work account under Access work or school, delete the RemoveWindowsStore value under the WindowsStore policies key in the registry, restart, and run wsreset.

Can admins deploy Store apps if the Store is blocked?

Yes. Add them in Intune as Microsoft Store app (new). They install and update through the Store engine even when users cannot open the Store app.