6.2 KiB
title, description, ms.author, ms.localizationpriority, ms.topic, ms.prod, ms.technology, author, ms.date, ms.reviewer, manager
title | description | ms.author | ms.localizationpriority | ms.topic | ms.prod | ms.technology | author | ms.date | ms.reviewer | manager |
---|---|---|---|---|---|---|---|---|---|---|
Policy CSP - Accounts | Policy CSP - Accounts | dansimp | medium | article | w10 | windows | manikadhiman | 09/27/2019 | dansimp |
Policy CSP - Accounts
Accounts policies
- Accounts/AllowAddingNonMicrosoftAccountsManually
- Accounts/AllowMicrosoftAccountConnection
- Accounts/AllowMicrosoftAccountSignInAssistant
Accounts/AllowAddingNonMicrosoftAccountsManually
Windows Edition | Supported? |
---|---|
Home | ![]() |
Pro | ![]() |
Business | ![]() |
Enterprise | ![]() |
Education | ![]() |
Mobile | ![]() |
Mobile Enterprise | ![]() |
[!div class = "checklist"]
- Device
Specifies whether user is allowed to add non-MSA email accounts.
Most restricted value is 0.
Note
This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountConnection
Windows Edition | Supported? |
---|---|
Home | ![]() |
Pro | ![]() |
Business | ![]() |
Enterprise | ![]() |
Education | ![]() |
Mobile | ![]() |
Mobile Enterprise | ![]() |
[!div class = "checklist"]
- Device
Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.
Most restricted value is 0.
The following list shows the supported values:
- 0 - Not allowed.
- 1 (default) - Allowed.
Accounts/AllowMicrosoftAccountSignInAssistant
Windows Edition | Supported? |
---|---|
Home | ![]() |
Pro | ![]() |
Business | ![]() |
Enterprise | ![]() |
Education | ![]() |
Mobile | ![]() |
Mobile Enterprise | ![]() |
[!div class = "checklist"]
- Device
Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.
Note
If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See Feature updates are not being offered while other updates are.
Note
If the MSA service is disabled, the Subscription Activation feature will not work properly and your users will not be able to “step-up” from Windows 10 Pro to Windows 10 Enterprise, because the MSA ticket for license authentication cannot be generated. The machine will remain on Windows 10 Pro and no error will be displayed in the Activation Settings app.
The following list shows the supported values:
- 0 - Disabled.
- 1 (default) - Manual start.
Footnotes:
- 1 - Added in Windows 10, version 1607.
- 2 - Added in Windows 10, version 1703.
- 3 - Added in Windows 10, version 1709.
- 4 - Added in Windows 10, version 1803.
- 5 - Added in Windows 10, version 1809.
- 6 - Added in Windows 10, version 1903.
- 7 - Added in Windows 10, version 1909.
- 8 - Added in Windows 10, version 2004.