mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 05:37:22 +00:00
242 lines
6.5 KiB
Markdown
242 lines
6.5 KiB
Markdown
---
|
||
title: Policy CSP - Accounts
|
||
description: Policy CSP - Accounts
|
||
ms.author: maricia
|
||
ms.topic: article
|
||
ms.prod: w10
|
||
ms.technology: windows
|
||
author: nickbrower
|
||
ms.date: 11/01/2017
|
||
---
|
||
|
||
# Policy CSP - Accounts
|
||
|
||
|
||
|
||
<hr/>
|
||
|
||
<!--StartPolicies-->
|
||
## Accounts policies
|
||
|
||
<dl>
|
||
<dd>
|
||
<a href="#accounts-allowaddingnonmicrosoftaccountsmanually">Accounts/AllowAddingNonMicrosoftAccountsManually</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-allowmicrosoftaccountconnection">Accounts/AllowMicrosoftAccountConnection</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-allowmicrosoftaccountsigninassistant">Accounts/AllowMicrosoftAccountSignInAssistant</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-domainnamesforemailsync">Accounts/DomainNamesForEmailSync</a>
|
||
</dd>
|
||
</dl>
|
||
|
||
<hr/>
|
||
<!--StartPolicy-->
|
||
<a href="" id="accounts-allowaddingnonmicrosoftaccountsmanually"></a>**Accounts/AllowAddingNonMicrosoftAccountsManually**
|
||
|
||
<!--StartSKU-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--EndSKU-->
|
||
<!--StartScope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--EndScope-->
|
||
<!--StartDescription-->
|
||
<p style="margin-left: 20px">Specifies whether user is allowed to add non-MSA email accounts.
|
||
|
||
<p style="margin-left: 20px">The following list shows the supported values:
|
||
|
||
- 0 – Not allowed.
|
||
- 1 (default) – Allowed.
|
||
|
||
<p style="margin-left: 20px">Most restricted value is 0.
|
||
|
||
> [!NOTE]
|
||
> This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the [EMAIL2 CSP](email2-csp.md).
|
||
|
||
<!--EndDescription-->
|
||
<!--EndPolicy-->
|
||
<hr/>
|
||
<!--StartPolicy-->
|
||
<a href="" id="accounts-allowmicrosoftaccountconnection"></a>**Accounts/AllowMicrosoftAccountConnection**
|
||
|
||
<!--StartSKU-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--EndSKU-->
|
||
<!--StartScope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--EndScope-->
|
||
<!--StartDescription-->
|
||
<p style="margin-left: 20px">Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
|
||
|
||
<p style="margin-left: 20px">The following list shows the supported values:
|
||
|
||
- 0 – Not allowed.
|
||
- 1 (default) – Allowed.
|
||
|
||
<p style="margin-left: 20px">Most restricted value is 0.
|
||
|
||
<!--EndDescription-->
|
||
<!--EndPolicy-->
|
||
<hr/>
|
||
<!--StartPolicy-->
|
||
<a href="" id="accounts-allowmicrosoftaccountsigninassistant"></a>**Accounts/AllowMicrosoftAccountSignInAssistant**
|
||
|
||
<!--StartSKU-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--EndSKU-->
|
||
<!--StartScope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--EndScope-->
|
||
<!--StartDescription-->
|
||
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
|
||
|
||
<p style="margin-left: 20px">The following list shows the supported values:
|
||
|
||
- 0 – Disabled.
|
||
- 1 (default) – Manual start.
|
||
|
||
<!--EndDescription-->
|
||
<!--EndPolicy-->
|
||
<hr/>
|
||
<!--StartPolicy-->
|
||
<a href="" id="accounts-domainnamesforemailsync"></a>**Accounts/DomainNamesForEmailSync**
|
||
|
||
<!--StartSKU-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--EndSKU-->
|
||
<!--StartScope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--EndScope-->
|
||
<!--StartDescription-->
|
||
<p style="margin-left: 20px">Specifies a list of the domains that are allowed to sync email on the device.
|
||
|
||
<p style="margin-left: 20px">The data type is a string.
|
||
|
||
<p style="margin-left: 20px">The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".
|
||
|
||
<!--EndDescription-->
|
||
<!--EndPolicy-->
|
||
<hr/>
|
||
|
||
Footnote:
|
||
|
||
- 1 - Added in Windows 10, version 1607.
|
||
- 2 - Added in Windows 10, version 1703.
|
||
- 3 - Added in Windows 10, version 1709.
|
||
|
||
<!--EndPolicies-->
|
||
|
||
<!--StartHoloLens-->
|
||
## <a href="" id="hololenspolicies"></a>Accounts policies supported by Windows Holographic for Business
|
||
|
||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||
<!--EndHoloLens-->
|
||
|