Using Win10 Pro "Warn me before installing apps from outside the store" instead of Win10 S?


How about using Win10 Pro’s settings “Allow apps from the store only” or “Warn me before installing apps from outside the store” instead of Win10 S. Wouldn’t’ this give one the security of Win10 S plus those Win32 apps one needs?

Seems to work even for self-contained .exe files like portable apps. See How to Allow Only Apps From the Store on Windows 10 (and Whitelist Desktop Apps)

Comments (9)

9 responses to “Using Win10 Pro "Warn me before installing apps from outside the store" instead of Win10 S?”

  1. hrlngrv

    You're not considering the possibility that Windows 10 S could have been designed for MSFT's needs, and MSFT needs a lot less non-store Win32 software but a lot more Windows Store software. Allowing users to install non-store software no matter how much those pesky users may believe they need that software doesn't serve MSFT's interests.

    • jimchamplin

      In reply to hrlngrv:

      That does not address the question. Regardless of Microsoft’s motives, Windows 10 S is more secure and safe from rot.

      • hrlngrv

        In reply to jimchamplin:

        And less productive because the Windows Store's contents are insufficient for many Windows users. As for safety, tricycles are safer than motorcycles. For the sake of safety, should we ban all motorcycles and give their owners trikes?

        Anyway, my previous comment was in response to the OP asking to be able to install just a few apps from outside the store. Off topic on safety, it only takes one tainted .EXE or .DLL to compromise a system. More to the OP's point, MSFT has no interest in filling the productivity holes in Windows 10 S. Would Windows 10 S be needed if MSFT provided a simple way for end users to put whatever Win32 software they wanted into containers? It's not difficult, just time consuming, to create virtual machines. Would it be an insuperable computer science problem to make it relatively easy to create containers?

        From my perspective, MSFT's focus is the Windows Store, not users' safe computing.

  2. MattHewitt

    I think it would give you the security but not necessarily the performance or the protection against "Windows rot."

    If your system isn't new and you flip the switch, it only protects you in the future and not from the things that are already installed.

    I could see a person doing this after a clean install w/ the official Microsoft image (not from an OEM w/ a bunch of crapware installed.)

    That way you could install the image, and maybe Chrome, and then flip the switch and I think you would be mostly protected.

  3. Mike Cramer

    A key difference is that Win10 S also strips out PowerShell, eliminating all sorts of scripting shenanigans.

    • hrlngrv

      In reply to Donkey_Gas:

      As well as the ability to remove Groove Music, Movies & TV and several other bundled apps.

      ADDED: with Set-ExecutionPolicy set to Restricted, what scripting shenanigans would be possible?