Restrict Microsoft Store Purchases on Windows 11

Managing app installations and purchases in the Windows 11 Microsoft Store helps prevent unauthorized spending, accidental downloads, and unapproved software installations. You can restrict access by enabling purchase authentication within the Store settings, configuring Microsoft Family Safety accounts for children, or completely disabling the Store using the Local Group Policy Editor.

Method 1: Require a Password or PIN for Purchases

The quickest way to prevent accidental or unauthorized transactions is to require account verification every time a purchase is made.

  1. Open the Microsoft Store on your Windows 11 PC.
  2. Click your profile icon in the top-right corner and select Settings.
  3. Under the Purchase sign-in section, toggle the switch to On for “I want to buy without a password, for faster checkout.” (Turning this option off requires your password or PIN for every transaction).
  4. Enter your Microsoft account credentials if prompted to confirm the change.

Method 2: Use Microsoft Family Safety for Child Accounts

If you are managing a PC for children, Microsoft Family Safety allows you to approve downloads and block specific age ratings.

  1. Go to Settings > Accounts > Family.
  2. Ensure your child is added as a standard user under your family group.
  3. Visit the Microsoft Family Safety portal in your web browser and sign in with the parent account.
  4. Select the child’s profile and navigate to Content filters.
  5. Under Apps and games, set the maximum age rating for allowed downloads.
  6. Under Spending, enable Require approval for every purchase to receive notification requests before any transaction or download completes.

Method 3: Block the Microsoft Store Using Group Policy (Windows 11 Pro, Enterprise, Education)

For complete control on professional editions of Windows 11, you can disable the Microsoft Store entirely.

  1. Press Windows Key + R, type gpedit.msc, and press Enter.
  2. Navigate to: Computer Configuration > Administrative Templates > Windows Components > Store
  3. Double-click the policy named Turn off the Store application.
  4. Select Enabled, then click Apply and OK.
  5. Restart your computer to apply the restriction. Users will no longer be able to open or download items from the Store.

Method 4: Switch Account Types to Standard User

Standard accounts cannot install applications that require administrative privileges or change core system configurations.

  1. Open Settings > Accounts > Other users.
  2. Click the user account you want to restrict and select Change account type.
  3. Change the dropdown menu from Administrator to Standard User.
  4. Click OK.