mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 06:17:22 +00:00
257 lines
6.4 KiB
Markdown
257 lines
6.4 KiB
Markdown
---
|
||
title: Policy CSP - Accounts
|
||
description: Policy CSP - Accounts
|
||
ms.author: maricia
|
||
ms.topic: article
|
||
ms.prod: w10
|
||
ms.technology: windows
|
||
author: MariciaAlforque
|
||
ms.date: 05/14/2018
|
||
---
|
||
|
||
# Policy CSP - Accounts
|
||
|
||
|
||
|
||
<hr/>
|
||
|
||
<!--Policies-->
|
||
## Accounts policies
|
||
|
||
<dl>
|
||
<dd>
|
||
<a href="#accounts-allowaddingnonmicrosoftaccountsmanually">Accounts/AllowAddingNonMicrosoftAccountsManually</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-allowmicrosoftaccountconnection">Accounts/AllowMicrosoftAccountConnection</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-allowmicrosoftaccountsigninassistant">Accounts/AllowMicrosoftAccountSignInAssistant</a>
|
||
</dd>
|
||
<dd>
|
||
<a href="#accounts-domainnamesforemailsync">Accounts/DomainNamesForEmailSync</a>
|
||
</dd>
|
||
</dl>
|
||
|
||
|
||
<hr/>
|
||
|
||
<!--Policy-->
|
||
<a href="" id="accounts-allowaddingnonmicrosoftaccountsmanually"></a>**Accounts/AllowAddingNonMicrosoftAccountsManually**
|
||
|
||
<!--SupportedSKUs-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--/SupportedSKUs-->
|
||
<!--Scope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--/Scope-->
|
||
<!--Description-->
|
||
Specifies whether user is allowed to add non-MSA email accounts.
|
||
|
||
Most restricted value is 0.
|
||
|
||
> [!NOTE]
|
||
> This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the [EMAIL2 CSP](email2-csp.md).
|
||
|
||
<!--/Description-->
|
||
<!--SupportedValues-->
|
||
The following list shows the supported values:
|
||
|
||
- 0 - Not allowed.
|
||
- 1 (default) - Allowed.
|
||
|
||
<!--/SupportedValues-->
|
||
<!--/Policy-->
|
||
|
||
<hr/>
|
||
|
||
<!--Policy-->
|
||
<a href="" id="accounts-allowmicrosoftaccountconnection"></a>**Accounts/AllowMicrosoftAccountConnection**
|
||
|
||
<!--SupportedSKUs-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--/SupportedSKUs-->
|
||
<!--Scope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--/Scope-->
|
||
<!--Description-->
|
||
Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
|
||
|
||
Most restricted value is 0.
|
||
|
||
<!--/Description-->
|
||
<!--SupportedValues-->
|
||
The following list shows the supported values:
|
||
|
||
- 0 - Not allowed.
|
||
- 1 (default) - Allowed.
|
||
|
||
<!--/SupportedValues-->
|
||
<!--/Policy-->
|
||
|
||
<hr/>
|
||
|
||
<!--Policy-->
|
||
<a href="" id="accounts-allowmicrosoftaccountsigninassistant"></a>**Accounts/AllowMicrosoftAccountSignInAssistant**
|
||
|
||
<!--SupportedSKUs-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /><sup>2</sup></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--/SupportedSKUs-->
|
||
<!--Scope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--/Scope-->
|
||
<!--Description-->
|
||
Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
|
||
|
||
<!--/Description-->
|
||
<!--SupportedValues-->
|
||
The following list shows the supported values:
|
||
|
||
- 0 - Disabled.
|
||
- 1 (default) - Manual start.
|
||
|
||
<!--/SupportedValues-->
|
||
<!--/Policy-->
|
||
|
||
<hr/>
|
||
|
||
<!--Policy-->
|
||
<a href="" id="accounts-domainnamesforemailsync"></a>**Accounts/DomainNamesForEmailSync**
|
||
|
||
<!--SupportedSKUs-->
|
||
<table>
|
||
<tr>
|
||
<th>Home</th>
|
||
<th>Pro</th>
|
||
<th>Business</th>
|
||
<th>Enterprise</th>
|
||
<th>Education</th>
|
||
<th>Mobile</th>
|
||
<th>Mobile Enterprise</th>
|
||
</tr>
|
||
<tr>
|
||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!--/SupportedSKUs-->
|
||
<!--Scope-->
|
||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||
|
||
> [!div class = "checklist"]
|
||
> * Device
|
||
|
||
<hr/>
|
||
|
||
<!--/Scope-->
|
||
<!--Description-->
|
||
Specifies a list of the domains that are allowed to sync email on the device.
|
||
|
||
The data type is a string.
|
||
|
||
The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".
|
||
|
||
<!--/Description-->
|
||
<!--/Policy-->
|
||
<hr/>
|
||
|
||
Footnote:
|
||
|
||
- 1 - Added in Windows 10, version 1607.
|
||
- 2 - Added in Windows 10, version 1703.
|
||
- 3 - Added in Windows 10, version 1709.
|
||
- 4 - Added in Windows 10, version 1803.
|
||
|
||
<!--/Policies-->
|
||
|
||
<!--StartHoloLens-->
|
||
## <a href="" id="hololenspolicies"></a>Accounts policies supported by Windows Holographic for Business
|
||
|
||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||
<!--EndHoloLens-->
|
||
|