How to Side-Load an MSIX App Without Developer Mode on Windows 11

You have an MSIX app package that needs to be installed on a Windows 11 machine, but you are not allowed to enable Developer Mode due to company policy or security restrictions. MSIX is the modern packaging format for Windows apps, and by default, installing unsigned or sideloaded MSIX packages requires Developer Mode to be turned on. This article explains how to bypass that requirement by using Group Policy, PowerShell, or the Windows Settings app to enable sideloading without turning on Developer Mode.

We will cover the technical difference between Developer Mode and Sideloading Mode, the exact steps to enable sideloading through three different methods, and the common pitfalls that cause installation to fail. After reading this guide, you will be able to deploy MSIX apps on Windows 11 in a locked-down environment without violating security policies.

What Is Sideloading Mode and How It Differs from Developer Mode

Windows 11 includes two separate settings for installing apps outside the Microsoft Store: Developer Mode and Sideloading Mode. Developer Mode is intended for developers who need to debug, deploy unsigned packages, and use device portal features. Sideloading Mode is designed for IT administrators who need to deploy signed line-of-business MSIX apps to managed devices without going through the Store.

The key technical difference is that Developer Mode allows installation of unsigned or self-signed packages, while Sideloading Mode requires packages to be signed with a trusted certificate. This makes Sideloading Mode a safer option for enterprise deployments because it enforces code signing. When you enable Developer Mode, you also implicitly enable sideloading, but the reverse is not true. You can enable Sideloading Mode alone, which is exactly what this guide accomplishes.

Prerequisites for Sideloading MSIX Apps on Windows 11

Before you begin, confirm that your Windows 11 system meets these requirements:

• Windows 11 Pro, Enterprise, or Education edition. Windows 11 Home does not support Group Policy and has limited sideloading options.
• The MSIX package must be signed with a certificate that is trusted by the device. This is typically a certificate from your organization’s internal CA or a purchased code-signing certificate.
• You must have administrative privileges on the device to change settings or apply Group Policy.
• For domain-joined devices, the Group Policy method requires access to the domain controller or Local Group Policy Editor.

Method 1: Enable Sideloading via Windows Settings

This is the fastest method for a single device. It does not require any additional tools or licenses.

1. Open Windows Settings
   Press the Windows key + I on your keyboard. The Settings app opens.
2. Navigate to the Developers page
   Go to Privacy and Security > For Developers. Scroll down to the Developer Mode section.
3. Enable Sideload apps
   Under the “Sideload apps” option, toggle the switch to On. A User Account Control prompt appears. Click Yes to confirm.
4. Verify the change
   Close Settings. The system is now ready to install signed MSIX packages. Double-click any signed .msix file to begin installation.

Note: If you see a message that sideloading requires a product key, your device may not have a sideloading license. In that case, use Method 2 or Method 3 below.

Method 2: Enable Sideloading via Group Policy

Use this method when you need to enable sideloading on multiple domain-joined Windows 11 devices at once. The setting is applied through the Local Group Policy Editor or managed through Active Directory.

1. Open Local Group Policy Editor
   Press Windows key + R, type gpedit.msc, and press Enter. If the command is not found, your edition of Windows 11 does not include Group Policy.
2. Navigate to the App Package Deployment policy
   Go to Computer Configuration > Administrative Templates > Windows Components > App Package Deployment.
3. Enable the Allow all trusted apps to install policy
   Double-click the policy named “Allow all trusted apps to install.” Select Enabled, then click OK.
4. Apply the setting
   Close the Group Policy Editor. Open a Command Prompt as administrator and run gpupdate /force to apply the change immediately.
5. Install the MSIX app
   Double-click the signed .msix file. The installation proceeds without requiring Developer Mode.

Tip: For domain-wide deployment, configure the same policy in a Group Policy Object linked to the organizational unit that contains the target devices.

Method 3: Enable Sideloading via PowerShell with a Product Key

Some Windows 11 devices, especially those not joined to a domain, require a sideloading product key to enable the feature. Microsoft provides a free sideloading product key for Windows 11 Pro and Enterprise editions. Use this method when the Settings toggle is grayed out or shows a license error.

1. Open PowerShell as administrator
   Right-click the Start button and select Windows Terminal (Admin) or PowerShell (Admin).
2. Install the sideloading license
   Run the following command:
   Set-WindowsDeveloperLicense -ProductKey 33VWN-3X2G2-6G2XG-8G2XG-8G2XG
   Replace the product key with the one provided by Microsoft for your edition. The command completes silently if successful.
3. Verify the license is installed
   Run Get-WindowsDeveloperLicense. The output shows the license status. If it returns a license, sideloading is now enabled.
4. Install the MSIX app
   Run Add-AppxPackage -Path "C:\path\to\your\app.msix". Replace the path with the actual location of your MSIX file.

Note: The product key shown above is a placeholder. Obtain the correct key from your Microsoft Volume Licensing portal or from the Windows Dev Center documentation.

Common Sideloading Failures and How to Fix Them

MSIX Installation Fails with Error 0x80073CF0

This error indicates that the app package is not signed or the certificate is not trusted. Verify that the MSIX file has a valid digital signature. Open the file properties, go to the Digital Signatures tab, and confirm the signature is from a trusted root. If the certificate is issued by your organization, install the root certificate into the Trusted Root Certification Authorities store on the device.

Sideloading Toggle Is Grayed Out in Settings

This happens when the device is managed by an organization that has disabled sideloading through Group Policy or MDM. Check with your IT administrator. If the device is not managed, run the PowerShell method above to install a sideloading license.

MSIX App Installs but Fails to Launch

The app may require dependencies that are not present on the system, such as the VC++ Runtime or .NET Framework. Check the app’s documentation for prerequisites. You can also run Add-AppxPackage -Path "app.msix" -DependencyPath "dependency.msix" to install dependencies alongside the main package.

Sideloading Mode vs Developer Mode: Installation Behavior Comparison

Item	Sideloading Mode	Developer Mode
Package signing requirement	Must be signed with a trusted certificate	No signing required (unsigned or self-signed allowed)
Device portal access	Not available	Available
SSH and device discovery	Not enabled	Enabled
Recommended for	Enterprise app deployment	App development and debugging
Group Policy support	Yes	No (policy only controls sideloading)

You can now install signed MSIX apps on Windows 11 without enabling Developer Mode by using the Settings toggle, Group Policy, or PowerShell with a product key. Each method serves a different environment: Settings for single devices, Group Policy for domain-managed machines, and PowerShell for devices that need a license. For ongoing deployments, set up a code-signing certificate from your internal CA and distribute it via Group Policy so all devices trust your MSIX packages automatically.