OS SecurityBleeping Computer
4.0 — MEDIUM
Microsoft now lets admins choose pre-installed Store apps to uninstall
Microsoft has updated a Windows 11 in-box app removal policy introduced in October to include a dynamic list that lets IT admins choose which preinstalled Store apps to uninstall. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Microsoft has updated its Windows 11 in-box app removal policy to allow IT admins to choose which preinstalled Store apps to uninstall, potentially enabling targeted removal of malicious or unwanted applications.
⚙️Technical Details
Affected Systems
Windows 11 version 24H2 Enterprise and Education editions
Attack Vectors
Group Policy Object (GPO) or custom OMA-URI for mobile device management (MDM)
💥Impact Assessment
Severity: medium
Who Is at Risk
IT admins and organizations with Windows 11 devices running Enterprise and Education editions
🛡️Recommended Actions
1Monitor Group Policy Object (GPO) updates for the RemoveDefaultMicrosoftStorePackages policy
2Verify that all devices have at least the April 2026 Windows non-security update deployed
3Implement custom OMA-URI for mobile device management (MDM) to remove malicious apps
📦Affected Products
Windows 11 version 24H2 Enterprise and Education editions
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.