6.4 KiB
title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date
title | description | ms.author | ms.topic | ms.prod | ms.technology | author | ms.date |
---|---|---|---|---|---|---|---|
Policy CSP - Accounts | Policy CSP - Accounts | maricia | article | w10 | windows | MariciaAlforque | 05/14/2018 |
Policy CSP - Accounts
Accounts policies
- Accounts/AllowAddingNonMicrosoftAccountsManually
- Accounts/AllowMicrosoftAccountConnection
- Accounts/AllowMicrosoftAccountSignInAssistant
- Accounts/DomainNamesForEmailSync
Accounts/AllowAddingNonMicrosoftAccountsManually
Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
---|---|---|---|---|---|---|
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
[!div class = "checklist"]
- Device
Specifies whether user is allowed to add non-MSA email accounts.
Most restricted value is 0.
Note
This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountConnection
Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
---|---|---|---|---|---|---|
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
[!div class = "checklist"]
- Device
Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
Most restricted value is 0.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountSignInAssistant
Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
---|---|---|---|---|---|---|
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
[!div class = "checklist"]
- Device
Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
The following list shows the supported values:
- 0 - Disabled.
- 1 (default) - Manual start.
Accounts/DomainNamesForEmailSync
Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
---|---|---|---|---|---|---|
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
[!div class = "checklist"]
- Device
Specifies a list of the domains that are allowed to sync email on the device.
The data type is a string.
The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".
Footnote:
- 1 - Added in Windows 10, version 1607.
- 2 - Added in Windows 10, version 1703.
- 3 - Added in Windows 10, version 1709.
- 4 - Added in Windows 10, version 1803.