2018-05-14 10:44:43 -07:00

6.4 KiB

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date
title description ms.author ms.topic ms.prod ms.technology author ms.date
Policy CSP - Accounts Policy CSP - Accounts maricia article w10 windows MariciaAlforque 05/14/2018

Policy CSP - Accounts


Accounts policies

Accounts/AllowAddingNonMicrosoftAccountsManually
Accounts/AllowMicrosoftAccountConnection
Accounts/AllowMicrosoftAccountSignInAssistant
Accounts/DomainNamesForEmailSync

Accounts/AllowAddingNonMicrosoftAccountsManually

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether user is allowed to add non-MSA email accounts.

Most restricted value is 0.

Note

 This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountConnection

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.

Most restricted value is 0.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountSignInAssistant

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.

The following list shows the supported values:

  • 0 - Disabled.
  • 1 (default) - Manual start.

Accounts/DomainNamesForEmailSync

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies a list of the domains that are allowed to sync email on the device.

The data type is a string.

The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".


Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.

Accounts policies supported by Windows Holographic for Business