Previously, Intune administrators were able to enforce the use of the private/company store by using the “Only display the private store within the Microsoft Store app” policy.
Unfortunately, this did not prevent end-users to directly access the public store using the Windows Package Manager (winget) APIs.
Well, good news as now administrators can now fully disable access to the Store apps to enforce accessing the store through the Windows Company Portal.
If you were using the “Only display the private store” policy, you should update your configuration profile to use the new “Turn off the Store application”.
This new setting is available from either Settings Catalog (Administrative Templates\Windows Components\Store) or Administrative Templates (Computer or User Configuration\Windows Components\Store)
