Many organizations don’t want their end users to install apps from the Windows Store. Since no suitable Group Policy exists for removing the Windows Store from the Start Screen, we need a workaround.

In my last post, I explained how to remove the Store icon from the Taskbar with a Group Policy and how to disable the Windows Store in your network. A problem with the latter solution is that, when end users click the Store icon on the Start Screen, they will see an error message that recommends stealing your precious time. I am guessing that this is not what you want.

Of course, the first solution that comes to mind is to simply uninstall the Windows Store app. However, if you remove all Modern apps after you deployed Windows or before you deployed your OS image, the Store icon will stubbornly stay on the Start Screen.

However, a workaround exists that allows you to remove the Store app icon from the Start Screen. To be honest, I don’t understand why the Group Policy that disables the Windows Store app doesn’t also remove the corresponding icon. The only way to get rid of the Windows Store appears to be to delete the Store shortcut from C:\ProgramData\Microsoft\Windows\Start Menu\Programs. (If you still need proof that Windows 8.1 still has a Start Menu that is just a bit bigger than before, look at the directory path.)

The folder containing the link to the Windows Store icon on the Start Screen

The folder containing the link to the Windows Store icon on the Start Screen

If you delete the Store icon manually, Windows will ask you a couple of times if you are really sure that you want to remove this wonderful icon. Not only do you need administrator rights to delete the link, but UAC will also inform you that you are about to do something dangerous—that is, deprive your users of all the fantastic games in the Windows Store. Thus, if you have UAC enabled in your network (which you should), things can get tricky if you want to remove the Store icon with a logon script.

The easiest way is to delete the Windows Store link file with Group Policy Preferences. You can do this either in Computer Configuration or User Configuration depending on how you organized your Active Directory structure.

Delete Windows Store app icon with Group Policy Preferences

Delete Windows Store app icon with Group Policy Preferences

Notice that, in Windows Explorer, the link appears as “Store.” However, the file name of the shortcut is “Windows Store.lnk.” Hence, you have to enter this line in the “Delete file(s)” field in the Group Policy Preferences: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk. Make sure that you set “Delete” as the action. If you want to, you can also select the “Suppress error” box.

You can also use a logon script to remove the file if you need more intelligence in your procedure. For instance, if you have to check whether the user has already installed Modern apps before you deprive him or her of the Store app, you’ll need a logon script.

However, you will then face two problems. One is that the logon script will usually run before the desktop (Explorer) is available, and you don’t have access to the user’s Start Menu folder at this time. This problem can be solved if you don’t work with the logon script under “Windows Settings” but rather with the Group Policy “Run these programs at user logon” under Administrative Templates > System > Logon. The second problem of this option is that UAC will get in your way; this usually means that you have to store an administrator password in clear text in your script. Therefore, I don’t recommend this option.

However, you can work with scheduled tasks. This option makes senses if you have other commands in your logon script that need administrator rights. You can find Scheduled Tasks in Computer and User Group Policy Preferences under Control Panel Settings. Make sure that you enter a user account that has administrator rights on your client computers and that you select “Run whether user is logged on or not.”

Create Scheduled Tasks

Create scheduled tasks

On the Triggers tab, specify to being the task “At log on.”

Triggers tab

Triggers tab

On the Actions tab, select “Start a program” as the action and enter the network share of your logon script.

Actions tab

Actions tab

In your PowerShell logon script, you could include the following line to remove the Windows Store from the user’s Start Screen:

Note that, with this method, you don’t have to store an administrator password in clear text on your server; Windows will store the encrypted password in the GPO. This is much safer, but it is still a security risk. Thus, if you only want to remove the Store icon, I would go for the Files option in Group Policy Preferences.

So far, we have disabled the Windows Store and removed the icon from the Start Screen. If you deployed Windows 8.1 Update before disabling the Store, however, you probably still have the Store icon pinned to the Taskbar. If you don’t want to disable the pinning of apps to the Taskbar altogether, read my next post. I will show you how to remove just the Windows Store symbol from the Taskbar with a PowerShell script.

Read 4sysops without ads by becoming a member!

Your question was not answered? Ask in the forum!

0
Share
3 Comments
  1. Dave Nicholls 6 years ago

    Another option is to customize the start screen for users. We do this at work since
    A: we dont have enterprise licensing for 8.1 [which is required for AD GPO control]
    B: we wanted a very, very limited start screen configuration for our workstation users[a large desktop icon, news, weather, office apps]

    There are a few ways to do this. I created a temp user, customized the start screen, exported the screen, and then use MDT to set the start screen as part of the default profile during workstation deployment. [this way i could have multiple screens, say, if i wanted one configuration for surface users, another for laptops users, and a very slimmed down third option for workstations].

    Here is a blog post that may be helpful
    http://blogs.technet.com/b/deploymentguys/archive/2012/10/26/start-screen-customization-with-mdt.aspx

    You can also use a GPO if you have enterprise licensing, or want to set a local GPO in an image [the latter is not preferable, but is an option]

    http://technet.microsoft.com/en-us/library/dn467928.aspx
    http://deploymentpros.wordpress.com/2013/11/02/management-and-customization-of-the-windows-8-1-start-screen/

    0

  2. Dave, thank you for the helpful comment. I think the problem of the GPO solution is that this locks down your Start Screen. I also find the procedure with the reference machine a bit complicated if you want to work with multiple Start Screens. I hope that the customization of the Start Screen and the deployment of modern apps becomes easier in future Windows versions.

    0

  3. John 5 years ago

    I found your article very helpful in finishing my task of cleaning up the Windows 8.1 GPO I was implementing so I did not have to keep disabling the Store manually. When I performed the remove of Windows Store.lnk from the location you listed, it automatically removed the pinned taskbar icon as well, so I did not have to go to your next tutorial, to accomplish that goal.

    0

Leave a reply

Your email address will not be published. Required fields are marked *

*

© 4sysops 2006 - 2020

CONTACT US

Please ask IT administration questions in the forums. Any other messages are welcome.

Sending

Log in with your credentials

or    

Forgot your details?

Create Account