BlockNonAdminUserInstall - Some components are installed afterwards and not with the main installer

[stephannn]

Microsoft PowerToys version

0.75.1

Installation method

Microsoft Store

Running as admin

No

Area(s) with issue?

Installer

Steps to reproduce

Hi,
we use intune to manage our devices and have following policies enabled:

• AllowAllTrustedApps (https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.Appx::AppxDeploymentAllowAllTrustedApps)
• BlockNonAdminUserInstall (https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.Appx::BlockNonAdminUserInstall)

This prevents the user to install appx/msix on his own. PowerToys gets deployed as a MS store app.

The issue is that PowerToys tries to install further msix on its own:

AppX Deployment operation failed for package file:///C:/Users/myuser/AppData/Local/PowerToys/ImageResizerContextMenuPackage.msix with error 0x80070005. The specific error text for this failure is: NULL
AppX Deployment operation failed for package file:///C:/Users/myuser/AppData/Local/PowerToys/WinUI3Apps/PowerRenameContextMenuPackage.msix with error 0x80070005. The specific error text for this failure is: Access is denied.

Microsoft does not offer a way to allow specific apps when above mentioned policies are set. Solution would be creating a single package for those deployments and maybe create a dependency in its installation routine.

✔️ Expected Behavior

Everything is installed with the main installer

❌ Actual Behavior

Some components are getting installed afterwards and are blocked by the policy BlockNonAdminUserInstall

Other Software

No response