

The documentation describes the CSPs are supported on Windows 10 and 11, I only tested this on Windows 11 22H2.

So, the only thing left for Intune managed devices, is using a custom Intune profile. Unfortunately, these settings are not available in the Microsoft Intune portal, and we also can’t import the ADMX file in an Administrative Templates policy in Intune (well importing might work), but the location on the Windows device to which the settings are ingested, is blocked. You might interpret the below text from this Microsoft documentation to completely block installing apps from the store…. But that doesn’t mean end-users are not able to install applications from the store (at least not on Windows 11 22H2 which I’m running). IT Admins might have limited the Microsoft Store to only the private store (which completely blocks the store in Windows 11), to only allow installing store apps made available by the IT department. Last week I wrote a blog post regarding the new Microsoft store integration in Intune, which made me realize that we might not only want to push some settings regarding the Microsoft Store but also regarding Windows Package Manager/ WinGet. So currently this doesn’t seem a stable solution: DesktopAppInstaller | Microsoft Store App Failed installing () : The below described settings to block Winget from using the Microsoft Store seem to cause an issue for certain users when the settings is applied during the enrollment. : The below described issue will be fixed in Windows Package Manager version 1.5, see GitHub for more info.
