Quick fix: “Network restricted” in Microsoft Store usually means you’re on a metered or limited connection. Settings → Network & internet → pick connection → toggle Metered connection off. Or: use different network (mobile hotspot, ethernet). For corporate proxy: configure Microsoft Store via Group Policy or proxy settings.
Microsoft Store throws “network restricted” or similar errors on metered connections, behind corporate proxies, or with specific Wi-Fi captive portals. Fix: unmark metered, configure proxy, or switch networks.
Affects: Windows 11.
Fix time: ~5 minutes.
What causes this
Microsoft Store needs full HTTPS access to Microsoft servers. Blocked by:
- Metered connection (Wi-Fi flagged as expensive).
- Corporate proxy / firewall.
- VPN with restrictive routing.
- Captive portal not authorized.
- Hosts file blocking Microsoft domains.
- Public Wi-Fi with daily limits.
Method 1: Disable metered connection
The most common fix.
- Open Settings → Network & internet → Wi-Fi (or Ethernet).
- Click the connected network (or pick from list).
- Scroll to Metered connection. Toggle Off.
- If on Ethernet: same setting in Ethernet section.
- Microsoft Store now allows downloads/updates over this network.
- For cellular tethering: usually metered by default. Toggle off if you have data to spare.
- For hotspot: similar.
- Note: turning off metered may incur cellular data usage. Be aware.
This is the standard fix.
Method 2: Configure proxy or VPN
For corporate / VPN environments.
- If behind corporate proxy: Settings → Network & internet → Proxy.
- Ensure proxy settings correct.
- Auto-detect: usually works if PAC file configured.
- Manual proxy: server address + port from IT.
- Whitelist Microsoft domains:
- *.windowsupdate.microsoft.com
- *.windowsupdate.com
- *.microsoft.com
- *.msftncsi.com
- *.s-microsoft.com
- For VPN: try Microsoft Store with VPN disconnected. Reconnect after install if needed.
- For corporate firewall: IT may need to whitelist Microsoft Store endpoints.
- For specific .Net / WinHTTP proxy:
netsh winhttp set proxy proxy-server:port. - For Group Policy: corporate Edge / Store proxy via Group Policy.
This is the proxy fix.
Method 3: Reset network and test alternative
For persistent issues.
- Reset network stack:
netsh winsock reset netsh int ip reset ipconfig /flushdns ipconfig /release ipconfig /renewReboot after.
- Or via Settings: Settings → Network & internet → Advanced network settings → Network reset. Reboots PC.
- Test with alternative network: mobile hotspot, friend’s Wi-Fi, public coffee shop Wi-Fi.
- If alternative works: network issue. ISP, router, or DNS.
- If alternative fails too: device-level issue. Continue with this PC.
- Check hosts file:
C:\Windows\System32\drivers\etc\hosts. Look for blocked Microsoft entries. Restore default. - For DNS: try public DNS:
netsh interface ipv4 set dnsservers "Wi-Fi" static 8.8.8.8 primary netsh interface ipv4 add dnsservers "Wi-Fi" 1.1.1.1 index=2 - For Captive Portal: open browser, accept Wi-Fi terms first. Some Wi-Fi require auth before allowing other apps.
This is the network reset approach.
How to verify the fix worked
- Microsoft Store opens app pages without “Network restricted” error.
- Apps install/update.
- Settings → Network & internet shows connection without metered tag.
ping store.microsoft.comsucceeds.
If none of these work
If error persists: Specific error code: search at support.microsoft.com. Reinstall network drivers: Device Manager → Network adapters → Update driver. For Wi-Fi specifically: forget network → reconnect. For chronic issues: sfc /scannow + dism /online /cleanup-image /restorehealth. For Surface PCs: ensure firmware up to date (drivers / firmware via Surface Diagnostic Toolkit). For ISP-level blocking: rare; contact ISP if Microsoft is unreachable. For specific app failing: developer’s server may be unreachable. For region-locked: change Microsoft account region via account.microsoft.com. Last resort: in-place repair upgrade: via Windows 11 ISO setup.exe. Repairs Windows components including network stack.
Bottom line: Settings → Network & internet → pick connection → toggle Metered connection off. For corporate: configure proxy with Microsoft domain whitelist. For chronic: reset network stack via netsh commands.