One of the new features in Windows 10 Creators Update is the ability to specify where applications can be installed from. I would like to implement this for my users just for that extra little warning to think about it before they install something. Settings...Apps...Apps & features First options "Installing apps" there is a pulldown. I don't want to have to visit every desktop and make the change there, that would be time consuming. I looked for an associated group policy, didn't find one, but did find that the associated registry location is Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer - a string value called AicEnabled. This string can be either "Anywhere" "PreferStore" or "StoreOnly". I want my users to have the warning so I created a group policy to set this registry entry. Problem is, after applying I can go look at the registry and the value is there as PreferStore; I can launch the settings and it shows what I want, "Warn me before installing apps from outside the Store"; but the setting is having no effect, users can still install anything without warning. This behavior even survives a reboot. Three questions: 1. Is there a proper Group Policy for this setting, and I've just missed finding it somehow? 2. Why is it not working where I've applied it? 3. Same question for the registry setting to change Powershell back to Command Prompt. (HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced DWORDontUsePowerShellOnWinX = 1) That one works as registry, but is there a proper Group Policy for it?