From bc98425f21082f1a8b79a94190ac74c23a16bdda Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Thu, 6 Jul 2023 10:30:00 -0400 Subject: [PATCH] Update accounts-block-microsoft-accounts.md --- .../accounts-block-microsoft-accounts.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md b/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md index 65c618b892..ab6175a99f 100644 --- a/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md +++ b/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts.md @@ -22,10 +22,11 @@ ms.technology: itpro-security **Applies to** - Windows 10, version 1607 and earlier -(In Windows 10, version 1703 and later, this policy is no longer effective because the process for adding Microsoft Accounts has been changed. Instead of using this policy, use the policy "Block all consumer Microsoft user account authentication" located under Computer Configuration\Administrative Templates\Windows Components\Microsoft account for Windows 10, version 1703 and later.) - Describes the best practices, location, values, management, and security considerations for the **Accounts: Block Microsoft accounts** security policy setting. +> [!IMPORTANT] +> In Windows 10, version 1703 and later, this policy is no longer effective because the process for adding Microsoft Accounts changed. For Windows 10, version 1703 and later, instead of using this policy use the "Block all consumer Microsoft user account authentication" policy located under Computer Configuration\Administrative Templates\Windows Components\Microsoft account. + ## Reference This setting prevents using the **Settings** app to add a Microsoft account for single sign-on (SSO) authentication for Microsoft services and some background services, or using a Microsoft account for single sign-on to other applications or services. For more information, see [Microsoft Accounts](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts).