Windows 11 Update Expands App Removal Control for IT Admins

Microsoft is giving IT administrators more control over Windows 11 environments with new app management capabilities rolling out in versions 24H2 and 25H2. The change arrives alongside the KB5083631 update and focuses on simplifying how organizations manage preinstalled apps across devices.

Broader control over preinstalled apps

With this update, admins can now remove virtually any preinstalled Microsoft Store app using its Package Family Name (PFN). This marks a clear shift from previous limitations, where only a subset of apps could be removed.

The feature relies on a policy called RemoveDefaultMicrosoftStorePackages, which allows dynamic lists of apps to be targeted and removed. It supports a wider range of MSIX and APPX packages, making system cleanup more flexible in managed environments.

Enterprise-focused deployment

Microsoft designed this capability specifically for enterprise and education users. It is not available on Home or Pro editions, reinforcing its role as an administrative tool rather than a consumer-facing feature.

Admins can deploy the policy using Group Policy (GPO) or custom OMA-URI configurations through mobile device management (MDM) systems. Native support in Microsoft Intune’s Settings Catalog is not yet available, though Microsoft is expected to add it in the coming months.

Important limitations and considerations

Despite the expanded control, the feature does not allow removal of core system components. It strictly targets apps installed through the Microsoft Store framework.

Removing an app also deletes its associated local data, which makes planning essential before deployment. Microsoft recommends notifying users in advance and ensuring important data is backed up to avoid unintended data loss.

Part of a broader Windows management push

The update reflects Microsoft’s continued push toward giving organizations tighter control over Windows environments. By allowing admins to strip out unnecessary apps, companies can streamline systems, reduce clutter, and maintain more standardized deployments.

However, the feature remains carefully restricted. Microsoft is clearly balancing flexibility with system integrity, ensuring that critical components remain untouched.

Wider context around KB5083631

This change arrives as part of the KB5083631 rollout, which also includes other fixes and adjustments across Windows 11. Microsoft recently clarified that some systems may experience an extra restart during installation due to Secure Boot certificate updates, a security-driven change tied to long-term platform protection.

The same update also addresses a Remote Desktop issue where security warning dialogs rendered incorrectly, improving usability for affected users.

Overall, the expanded app removal controls highlight Microsoft’s ongoing effort to refine Windows 11 for enterprise needs, with more granular management tools expected to follow in future updates.

Via Neowin