Not allow per-user unsigned packages to install by default (requires explicitly allow per install)

Supported on: At least Windows 10 Version 22H2

Registry

HKLM Software\Policies\Microsoft\Windows\Appx

Value name: DisablePerUserUnsignedPackagesByDefault

Enabled: DisablePerUserUnsignedPackagesByDefault = 1

Disabled: DisablePerUserUnsignedPackagesByDefault = 0

Description

Not allow per-user unsigned packages to install by default (requires explicitly allow per install) If you enable this policy, the AllowUnsigned option defaults to 'false'. If you disable this policy, the AllowUnsigned option defaults to 'true'. Default is 'disabled' (key not present).