Skip to content

Latest commit

 

History

History
256 lines (208 loc) · 5.79 KB

policy-csp-accounts.md

File metadata and controls

256 lines (208 loc) · 5.79 KB
title description ms.author ms.localizationpriority ms.topic ms.prod ms.technology author ms.date ms.reviewer manager
Policy CSP - Accounts
Policy CSP - Accounts
dansimp
medium
article
w10
windows
manikadhiman
09/27/2019
dansimp

Policy CSP - Accounts


Accounts policies

Accounts/AllowAddingNonMicrosoftAccountsManually
Accounts/AllowMicrosoftAccountConnection
Accounts/AllowMicrosoftAccountSignInAssistant

Accounts/AllowAddingNonMicrosoftAccountsManually

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark
Mobile check mark
Mobile Enterprise check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether user is allowed to add non-MSA email accounts.

Most restricted value is 0.

Note

 This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountConnection

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark
Mobile check mark
Mobile Enterprise check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.

Most restricted value is 0.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountSignInAssistant

Windows Edition Supported?
Home cross mark
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2
Mobile check mark2
Mobile Enterprise check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.

Note

 If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See Feature updates are not being offered while other updates are.

The following list shows the supported values:

  • 0 - Disabled.
  • 1 (default) - Manual start.

Footnotes:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.
  • 6 - Added in Windows 10, version 1903.