Ensure 'Install unknown apps' is set to 'Disabled'

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Follow the below steps to verify that Install unknown apps is Disabled: phone's Settings app > Apps & notifications > Advanced > Special app access > Install unknown apps > Verify that all of the apps in the list show Not allowed.

How it is fixed

Fix method: Guidance or infrastructure patch

Follow the below steps to disable Install unknown apps: phone's Settings app > Apps & notifications > Advanced > Special app access > Install unknown apps > any app showing Allowed > Toggle Allow from this source to OFF position.