I've recently been testing the security policies and I've found I can no
longer download any App from the Microsoft Store. I've set an override
in the app control profile to allow Microsoft Store. I'm using the
default AV, Web filter, and DNS profile...