Something weird popped up on the Microsoft Volume Licensing pricelist today that the sales folks had to ask me about. I guessed that this was related to sideloading of apps as was promised in Windows 8, but I wasn’t sure of the specifics. I did some Googling.
There’s a very good chance that mid-to-large enterprises will want to develop their own in house
Metro … Windows 8 Style … Modern UI … *For Fu*k’s Sake!!!* Metro apps to run on their Windows 8 PCs. It’s extremely unlikely that they’ll want to do this through the Microsoft Store. It is possible to sideload those apps onto Windows 8, bypassing the Microsoft Store. The tools will certify your app, making it a trusted app (see the GPO stuff later).
Note, this applies only to Metro apps. Desktop apps are installed the same way as they always have, and don’t need to be treated any differently as they were on XP, Vista, or Windows 7.
There are two things you need to deal with.
Allow Apps To Be Sideloaded To Windows
There are two steps to enabling Windows to allow an app to be sideloaded:
- Sign/package the app with a trusted certificate.
- Configure the registry manually, via script, or via group policy to allow trusted apps to be added to Windows.
You can configure domain-joined machines to permit trusted apps to be sideloaded using Group Policy:
- Start the Group Policy editor (gpedit.msc).
- Navigate to Local Computer Policy, Computer Configuration, Administrative Templates, Windows Components, App Package Deployment.
- Open the Allow All Trusted Apps To Install setting.
- Click Enabled and then click OK.
This GPO configuration will set the following registry setting: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps = 1.
Allow Sideloaded Apps To Be Run
If have Windows 8 Enterprise (only available if your Windows 8 Pro PC is licensed with Software Assurance) or Windows Server 2012 then you can enable sideloading of apps on those machines by:
- Joining the machines to a domain
- Configuring the above Allow All Trusted Applications To Install GPO.
Alternatively, if you have any other edition of Windows 8 (such as Windows 8 Pro) or if the machine must not be domain-joined then you must:
- Configure the above registry key.
- Activate a sideloading product key using Slmgr.vbs. And that’s the new SKU that our sales people saw in this month’s Microsoft VL price list.
Deploying the App
According to Microsoft there are two ways to deploy the app.
To inject an app into a WIM image before PC deployment then you can use DISM:
DISM /Add-ProvisionedAppxPackage /PackagePath:C:\App1.appx /SkipLicense
If the PC is already deployed then you can use PowerShell:
You can use Get-Appxpackage to determine if an app is installed and perform updates to it by running:
All of the above applies to the x86/x64 editions of Windows 8. If you’re running Windows RT then the experience is simpler by using a “management client”. Don’t ask me a thing about it; like 99.9999% of the world’s population, I’ve not see Windows RT in person yet.