Misryoum reports Microsoft expanded a Windows 11 policy, letting IT admins dynamically choose which preinstalled Store apps to remove via GPO or MDM.
Microsoft is making it easier for IT teams to control what preinstalled apps land on enterprise Windows 11 devices, with an update that brings more flexibility to Store app removal.
Under a revised Windows 11 in-box app removal policy. Misryoum says administrators can now select specific preinstalled Microsoft Store apps to uninstall using a dynamic list.. The policy. called RemoveDefaultMicrosoftStorePackages. lets IT reference apps by their Package Family Name (PFN). whether they’re managing endpoints through Group Policy (GPO) or via mobile device management (MDM).
This change matters because preinstalled Store apps can vary across deployments, and removing the “wrong” app category can trigger support tickets or compatibility concerns. A targeted policy approach helps keep device images aligned with an organization’s actual needs.
To use the updated policy, Misryoum says organizations need devices to have the April 2026 Windows non-security update installed. Windows Insiders can access the update through later March 2026 builds in the Dev and Beta channels.
For Group Policy specifically, Misryoum notes that the policy relies on PFN-based targeting rather than blanket removal. That gives admins a more controlled path for trimming down the default Store app footprint, including preinstalled MSIX/APPX packages.
Misryoum’s takeaway: PFN-driven targeting is a practical shift for enterprises that standardize software across fleets. It reduces the guesswork involved in which packages are present and supports more consistent endpoint management over time.
Microsoft is also expanding where the policy can be used. Misryoum reports the RemoveDefaultMicrosoftStorePackages policy now applies to Windows 11 24H2 Enterprise and Education editions, after originally being limited to newer versions such as Windows 11 25H2 and up.
Meanwhile. Microsoft says the same policy guidance is available for both single-device scenarios and broader rollouts through Active Directory-joined management flows.. Misryoum adds that even though the Intune settings entry doesn’t list the dynamic option right now. Microsoft expects that dynamic capability to arrive in Intune in the coming months.
Finally, Misryoum points out that the update fits a larger trend in enterprise IT: more granular control over built-in and preloaded software. As Microsoft extends these policy tools, organizations may be able to reduce app sprawl without forcing disruptive operating system upgrades.