5.6 KiB
title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date
| title | description | ms.author | ms.topic | ms.prod | ms.technology | author | ms.date |
|---|---|---|---|---|---|---|---|
| Policy CSP - Accounts | Policy CSP - Accounts | maricia | article | w10 | windows | nickbrower | 07/14/2017 |
Policy CSP - Accounts
Warning
Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Accounts policies
Accounts/AllowAddingNonMicrosoftAccountsManually
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
 |
 |
|
|
|
|
Specifies whether user is allowed to add non-MSA email accounts.
The following list shows the supported values:
- 0 – Not allowed.
- 1 (default) – Allowed.
Most restricted value is 0.
Note
This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.
Accounts/AllowMicrosoftAccountConnection
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
The following list shows the supported values:
- 0 – Not allowed.
- 1 (default) – Allowed.
Most restricted value is 0.
Accounts/AllowMicrosoftAccountSignInAssistant
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
2 |
2 |
2 |
2 |
2 |
2 |
Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
The following list shows the supported values:
- 0 – Disabled.
- 1 (default) – Manual start.
Accounts/DomainNamesForEmailSync
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
Specifies a list of the domains that are allowed to sync email on the device.
The data type is a string.
The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".
Footnote:
- 1 - Added in Windows 10, version 1607.
- 2 - Added in Windows 10, version 1703.
- 3 - Added in Windows 10, version 1709.