To unlock network restrictions applied by Windows 8 stores

If you are a corporate user, you have a company's proxy server environment, or if you are a developer, you have found that all store applications will no longer have access to the network after the local connection is replaced. This is due to the network isolation design of the new WinRT runtime. In fact, we have two ways to remove the restrictions on network isolation, so that store applications in special times can also access the internet ...

In Windows 8, we introduced a new WinRT platform for store applications that include dynamic tiles and immersive user experiences.

If you are a corporate user, you have a company's proxy server environment, or if you are a developer, you have found that all store applications will no longer have access to the network after the local connection is replaced. This is due to the network isolation design of the new WinRT runtime.

In order to implement the new security policy and make the application on the WinRT platform more secure, store applications must be declared by the developer prior to using a feature. For example, to use a network connection, you need to declare that you need not only to declare a network connection, but also to declare clearly which type of connection is required. Because network isolation is implemented, all store applications cannot use IP loopback addresses for interprocess communication by default. When we specify a proxy server for the LAN in the connection settings that are set up in the Internet, the store application will not be able to surf the Internet at this time, only the desktop version of the application can access through the proxy server. (WinRT has the ability to detect a default proxy server for a local network so that store applications can access the Internet, but it cannot be automatically detected after a LAN agent has been manually specified.) ）

Sometimes, when the default network proxy server inside the company is not working, IT administrators may require users to manually specify another LAN proxy server, at this time, store applications are not online, really depressed, in fact, we have two ways to remove the restrictions on network isolation, so that store applications in a special period can also be online:

Law one: Use Group Policy to specify an Internet proxy for the network isolation environment

Open the Local Group Policy Editor, expand Computer Configuration-Manage Templates-network-network isolation, and we can see the following settings:

We can edit the "Applied Internet Proxy Server" to specify an Internet proxy. Note that the proxy specified here is consistent with the LAN agent you specify in the connection settings for the desktop IE option, so that the store application can have access to the Internet. Yes, it's just a foundation. Because, only specify this item, you add agent and system detected agent is a set, because of the priority of automatic detection, and after the desktop specified LAN agent, the detected agent and manually specified LAN agent inconsistent, the result is still not online. So in order for store applications to be able to surf the internet, we also need to enable the "Proxy definition authority", so that store applications use only the agents specified here.