Details
This service manages Apps that are pushed to the device from the Microsoft Store App running on other devices or the web.
The recommended state for this setting is: Disabled.
Rationale:
In a high security managed environment, application installations should be managed centrally by IT staff, not by end users.
Impact:
Users will not be able to push Apps to this device from the Microsoft Store running on other devices or the web.
Solution
To establish the recommended configuration via GP, set the following UI path to: Disabled.
Computer ConfigurationPoliciesWindows SettingsSecurity SettingsSystem ServicesWindows PushToInstall Service (PushToInstall)
Default Value:
Manual (Trigger Start)
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.