This policy setting controls whether Windows Store apps with Windows Runtime API access directly from web content can be launched. If you enable this policy setting, Windows Store apps with Windows Runtime API access directly from web content cannot be launched; Windows Store apps without Windows Runtime API access from web content are not affected. If you disable or do not configure this policy setting, all Windows Store apps can be launched. Countermeasure: Enable and configure this setting. Potential Impact: Windows Store apps with Windows Runtime API access directly from web content cannot be launched. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsApp runtimeBlock launching Windows Store apps with Windows Runtime API access from hosted content. (2) REG: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem!BlockHostedAppAccessWinRT

[enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\App runtime\Block launching Windows Store apps with Windows Runtime API access from hosted content. (2) REG: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System!BlockHostedAppAccessWinRT