DoNotAddAllApplicationPackagesToRestrictions

Determines whether RPCSS automatically appends an ALL_APPLICATION_PACKAGES SID to COM restrictions by default.

Registry entry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
   DoNotAddAllApplicationPackagesToRestrictions = value

Remarks

This is a REG_DWORD value.

Value Description
0 Disables Windows Store apps upon migration from Windows 7 to Windows 8.
1 Does not add the ALL_APPLICATION_PACKAGES SID to COM restrictions. This is the default.

Many Windows APIs need access to resources (in some cases, system resources) that would normally be inaccessible to an app running inside an AppContainer (unless you changed the resources' ACLs). To solve that, many resources across Windows (various files, registry keys, and so on) are ACL'd with ALL_APPLICATION_PACKAGES, in order to grant access to any processes that's running in an AppContainer. When you hear ALL_APPLICATION_PACKAGES, it's best to interpret that as if it were named ALL_APPCONTAINERS, since that would be a more accurate name.