7.1 KiB
title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date, ms.reviewer, manager
| title | description | ms.author | ms.topic | ms.prod | ms.technology | author | ms.date | ms.reviewer | manager |
|---|---|---|---|---|---|---|---|---|---|
| Policy CSP - Accounts | Policy CSP - Accounts | v-madhi | article | w10 | windows | v-madhi | 05/01/2019 | dansimp |
Policy CSP - Accounts
Accounts policies
- Accounts/AllowAddingNonMicrosoftAccountsManually
- Accounts/AllowMicrosoftAccountConnection
- Accounts/AllowMicrosoftAccountSignInAssistant
- Accounts/DomainNamesForEmailSync
Accounts/AllowAddingNonMicrosoftAccountsManually
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
 |
 |
|
|
|
|
|
[!div class = "checklist"]
- Device
Specifies whether user is allowed to add non-MSA email accounts.
Most restricted value is 0.
Note
This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountConnection
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
[!div class = "checklist"]
- Device
Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
Most restricted value is 0.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountSignInAssistant
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
2 |
2 |
2 |
2 |
2 |
2 |
[!div class = "checklist"]
- Device
Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
Note
If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See Feature updates are not being offered while other updates are.
The following list shows the supported values:
- 0 - Disabled.
- 1 (default) - Manual start.
Accounts/DomainNamesForEmailSync
| Home | Pro | Business | Enterprise | Education | Mobile | Mobile Enterprise |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
[!div class = "checklist"]
- Device
Specifies a list of the domains that are allowed to sync email on the device.
The data type is a string.
The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".
Accounts policies supported by Windows Holographic
Accounts policies supported by Windows Holographic for Business
Footnotes:
- 1 - Added in Windows 10, version 1607.
- 2 - Added in Windows 10, version 1703.
- 3 - Added in Windows 10, version 1709.
- 4 - Added in Windows 10, version 1803.
- 5 - Added in Windows 10, version 1809.