Welcome back to ITSpecialist.News! Today we’re talking about a very “IT admin-friendly” feature to clean up Windows 11 25H2 machines managed with Intune, removing preinstalled apps (Xbox, Solitaire, etc.) in a supported and native way using the RemoveDefaultMicrosoftStorePackages setting.
📰 Video or article? What do you prefer?
Some notes to make the most of this content.
If you prefer watching the full video, easy: find it above in the header.
If you prefer reading, also easy: keep reading here. For each step, I’ve inserted the specific video clip, so you’ll only see the screens that interest you, without my face talking.
Either way, subscribe to the newsletter to make sure you don’t miss any new tutorial releases.
Perfect, let’s get started!
What are preinstalled apps?
When talking about “preinstalled apps,” we mean the Microsoft Store in-box apps that Windows 11 provides by default (those you already find ready in Start and the Installed apps list).
They’re convenient in consumer scenarios, but in enterprise environments they’re often just noise: they increase user confusion, generate avoidable tickets, and complicate base image standardization.
Approach
The approach is: create a configuration profile in Intune’s Settings Catalog, enable “Remove default Microsoft Store packages from the system,” and set to True the apps you want to remove.
Enforcement happens during specific events like OOBE/provisioning or user sign-in after upgrade/policy update, so it’s normal not to see “instant” results.
Requirements
To use the RemoveDefaultMicrosoftStorePackages setting, you need precise OS/edition prerequisites:
The feature is designed for Windows 11 Enterprise/Education
Requires Windows 11 version 25H2 (or later)
The PC must be managed by Microsoft Intune
Does not support multi-session environments
Important note 1: not a “universal” anti-bloatware
With this configuration, you remove only the Microsoft “in-box” default apps listed in the policy, not any third-party bloatware (OEM, trials, “exotic” stuff).
For those, continue using custom scripts (PowerShell) or Remediations/Proactive Remediations via Intune, as per tradition.
Important note 2: policy application timing and scenarios
The policy activates in specific situations, so if you expect apps to disappear instantly on an existing machine with an already-created user profile, listen carefully to what I’m about to say.
Here are the situations where the policy activates:
Out-of-box experience (OOBE)
User login after an OS upgrade
User login after a policy change
This means removal is guaranteed on new user profiles created on the machine after policy application, while for existing ones, you need at least logoff-logon a few hours after policy creation.
Perfect, now we’re ready to start!
Initial situation verification
Before touching Intune, it’s best to check the “out of the box” situation: standard Windows 11 PC with default apps present, so you have a clean and measurable before/after.
You can do this verification from Settings → Apps → Installed apps (or searching “Xbox,” “Camera,” etc. in Start).
Removal configuration
In Microsoft Intune admin center, create a Configuration profile for “Windows 10 and later” using “Settings catalog,” then search for the setting Remove default Microsoft Store packages from the system.
If you want to navigate the tree manually, find everything under the node:
Administrative Templates → Windows Components → App Package Deployment
Policy application verification
Now log into a machine targeted by our policy and verify that the selected apps are no longer installed.
Microsoft describes policy application in scenarios like OOBE/provisioning and sign-in after upgrade or policy update, so correct verification timing is crucial.
For an “admin” verification, you can also check that the policy has written the registry keys in HKLM\SOFTWARE\Policies\Microsoft\Windows\Appx\RemoveDefaultMicrosoftStorePackages.
Deep dives (generous like extra pounds)
Here’s the usual dump of official Microsoft documentation (yes: it needs to be STUDIED).
Conclusions
Finally, a supported and “clean” method to manage default apps on Windows 11 Enterprise/Education without relying solely on scripts that eventually bill you during Autopilot or after an upgrade!
If you liked the article, leave a like, reshare everywhere on your favorite socials, and subscribe to the ITSpecialist.News newsletter: it’s the best way not to miss practical guides on Intune, Windows, and security.
See you in the next video! Talk soon… LEGENDARY!
Rick
