This policy setting controls whether users can push Apps to the device from the Microsoft Store App running on other devices or the web. In a high security managed environment, application installations should be managed centrally by IT staff, not by end users. The recommended state for this setting is: Enabled . Fix: (1) GPO: Computer Configuration\Policies\Administrative Templates\Windows Components\Push to Install\Turn off Push To Install service (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall:DisablePushToInstall