scloud by Florian Salzmann
ende

Remove Any Preinstalled Microsoft Store App with Intune Settings Catalog

You want Lovable gone from every Windows 11 device before it reaches a user. Maybe it is a different app on your list, but the story is the same. If you have ever tried RemoveDefaultMicrosoftStorePackages through Group Policy or a custom OMA URI, you know it is not a five minute job.

Microsoft added a dynamic app removal list to that policy in April 2026, which finally let you target any Microsoft Store app by its Package Family Name (PFN) instead of just the built in checkbox list. The catch was that it still ran through GPO or a raw OMA URI payload, plus a mandatory one time registry touch on every device. I tested the current Settings Catalog implementation on Windows 11, version 25H2, build 26200.8893, and removed Lovable in a few clicks and one PowerShell command. No XML, no registry key.

Table of Contents

Open Table of Contents

What is the Microsoft Store App Removal Policy

RemoveDefaultMicrosoftStorePackages is an ADMX backed policy that uninstalls preinstalled MSIX/APPX apps on Windows 11 Enterprise and Education devices. It originally shipped as a static checkbox list. You could tick off apps like Clipchamp, Copilot, or MicrosoftSolitaireCollection and Windows would remove them at provisioning or next sign in.

In April 2026, Microsoft extended the policy with a dynamic removal list. Instead of being limited to the apps Microsoft predefined, you could add any PFN and Windows would treat it the same way: uninstall it, block reinstallation while the policy is active, and remove the associated app data.

That part was genuinely useful. What still needed work was how you configured it.

Why the OMA URI Approach Was Painful

If you built this through a custom OMA URI, you were writing a full XML payload by hand:

<enabled/>
<data id="Clipchamp" value="false"/>
<data id="MSTeams" value="false"/>
<data id="DynamicRemovalList" value="Microsoft.BingNews_8wekyb3d8bbwe&#x0D;&#x0A;Microsoft.WindowsAlarms_8wekyb3d8bbwe"/>

Notice the &#x0D;&#x0A; in the dynamic list value. That is an HTML encoded carriage return and line feed, and it is how you separate multiple PFNs in the string. Get that wrong and the policy silently fails to apply the way you expect.

On top of that, Microsoft’s own documentation calls out a mandatory step: you have to open the dynamic list registry key once on each device for the format to normalise correctly.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\RemoveDefaultMicrosoftStorePackages

That is not something you can script cleanly at scale without extra tooling, and it is easy to miss during a rollout. Add in the warning about CSP schema mismatches between older and newer devices, where a policy built for the new schema can fail to parse on an older build, and this became a policy I approached carefully rather than one I pushed out fast.

What Changed: Native Settings Catalog Support

The Settings Catalog entry for this policy now exposes the dynamic removal list directly as a setting. You search for it, add your PFNs in the field, and assign the profile. No OMA URI construction, no XML escaping, and in my test, no manual registry step.

This matters because it puts app removal in the same workflow as every other Settings Catalog policy you already manage. You are not maintaining a separate custom profile with hand built XML sitting next to your normal catalog based configuration.

Finding the Package Family Name

Before you can remove a custom app, you need its PFN. Run this on a device where the app is installed:

Get-AppxPackage *Lovable* | Select-Object PackageFamilyName

PowerShell output showing the resolved PackageFamilyName for Lovable

The wildcard match on the app name is enough. The output gives you the exact PFN string you paste into the Settings Catalog dynamic list field.

Testing: Removing Lovable on Windows 11 25H2

I ran this test on Windows 11, version 25H2, build 26200.8893, Enterprise edition. Lovable is not part of Microsoft’s default checkbox list, so it is a good test case for the dynamic list specifically, not the built in options.

Dynamic removal list field in Intune Settings Catalog with the Lovable PFN entered

After assigning the profile and syncing the device, Lovable was removed at next sign in, along with its local app data. That last part is worth planning for. If a user has anything stored locally in the app, it is gone once the policy applies.

Deploying with Intune

  1. Go to Devices > Configuration > Settings catalog > + Create.
  2. Search for Remove default Microsoft Store packages from the system and add it.
  3. Leave the standard checkbox apps as needed for your organisation, or leave them all unset if you only want the custom app removed.
  4. In the dynamic list field, paste the PFN you resolved with Get-AppxPackage. Use one PFN per line if you are removing more than one custom app.
  5. Assign the profile to a small test group first, not your full fleet.
  6. Sync a test device and confirm the policy applies before widening the assignment.

Start narrow. This policy deletes app data on removal, so a bad PFN entry or an unintended assignment scope is not something you want to discover on production devices.

Testing and Verification

On the test device, confirm the app is gone after sign in and check that it cannot be reinstalled from the Microsoft Store while the policy is active. If you need to roll it back, remove the assignment and the app becomes installable again, though Windows will not restore what was already removed automatically.

A few things Microsoft is explicit about, and that I confirmed matter in practice:

  • Removing an app also removes its on disk app data. Warn users before you push this if the app is something they use with local files.
  • You cannot use the dynamic list to remove system components. It is meant for MSIX/APPX packaged apps, not core Windows functionality.
  • Removed apps stay blocked from reinstallation for as long as the policy is assigned.

Caveats to Know Before You Roll This Out

This is supported on Windows 11, version 24H2 and 25H2, Enterprise and Education editions only. Home and Pro are not supported, and you need at least the April 2026 non security update installed on the device for the dynamic list functionality to work at all.

I have only confirmed the native Settings Catalog behaviour, including skipping the registry step, on build 26200.8893. If you are running a mixed fleet with older builds still on the OMA URI approach, keep that policy separate from a newer Settings Catalog based one rather than trying to consolidate immediately. Microsoft’s own guidance on the CSP schema mismatch was written with the OMA URI method in mind, so test carefully before you assume Settings Catalog fully removes that risk across every build in your environment.

Intune support for the dynamic list through Settings Catalog was still described as rolling out gradually at the time I wrote this, so if you search for the setting and only see the static checkbox options, your tenant may not have the update yet.

If you are still removing custom apps through a hand built OMA URI, this is worth switching over. Ten minutes in Settings Catalog replaces an XML payload, a registry workaround, and the schema mismatch risk that came with it. Just test on a small group first, since app data removal is not reversible once the policy applies.

Related posts

DNS Suffixes set via Intune
Microsoft Intune

Set DNS Suffixes via Microsoft Intune

Learn how to configure DNS suffixes via Microsoft Intune with a Settings Catalog profile, deploy them safely, and verify the setup on managed Windows devices.

Free up space for Windows 11 upgrades with Intune Remediation
(Proactive) Remediations

Free up space for Windows 11 upgrades with Intune Remediation

Learn how to use Intune Proactive Remediation to detect and fix low disk space before a Windows 11 upgrade with a user friendly popup.

Lock Windows 11 to 24H2 with Intune
Microsoft Intune

Quick Tip: Lock Windows 11 to 24H2 During Onboarding

Prevent unintended upgrades to Windows 11 25H2 during onboarding. Pin 24H2 via Intune Settings Catalog and WUfB.