1. Home
  2. Security Hardening
  3. CIS Microsoft Windows 10 Enterprise Release 1909 V1.8.1 L2 Ng
  4. Ensure ‘Microsoft Store Install Service (InstallService)’ is set to ‘Disabled’

Ensure ‘Microsoft Store Install Service (InstallService)’ is set to ‘Disabled’

Details

This service provides infrastructure support for the Microsoft Store.

The recommended state for this setting is: Disabled.

Rationale:

In a high security managed environment, application installations should be managed centrally by IT staff, not by end users.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer ConfigurationPoliciesWindows SettingsSecurity SettingsSystem ServicesMicrosoft Store Install Service (InstallService)

Note: In older versions of Microsoft Windows 10, this service was initially named Windows Store Install Service (InstallService), but it was renamed starting with Windows 10 Release 1803.

Impact:

Microsoft Store App installations will not function properly.

Default Value:

Manual.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles