This service manages Apps that are pushed to the device from the Microsoft Store App running on other devices or the web. In a high security managed environment, application installations should be managed centrally by IT staff, not by end users. Default: Manual (Trigger Start) Counter Measure: The recommended state for this setting is Disabled. Potential Impact: Users will not be able to push Apps to this device from the Microsoft Store running on other devices or the web Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Windows PushToInstall Service (PushToInstall) (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall!Start