Teams - can automatic sign-in be disabled

Question

We have several meeting room computers and shared laptops which have a single shared user account (and they are not domain joined). Is it possible to prevent Teams from signing in automatically? From testing, it appears that once the user clicks OK to the default options the first time they sign in, it will then cache the details and even if they sign out, it will remember the password as soon as an attempt to sign back in with that email address is attempted - which is obviously not suitable for a shared computer account.

Thanks

Answer 1

I made this batch script which solved the problem for us:

taskkill /IM "Teams.exe" /F
taskkill /IM "Microsoft.AAD.BrokerPlugin.exe" /F
del C:\Users\%username%\AppData\Roaming\Microsoft\Teams\desktop-config.json /q
rd C:\Users\%username%\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy /s /q

Answer 2

Hi,

I had the same Problem. Just add this Registry key:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin

DWORD: BlockAADWorkplaceJoin
and assign value 1

Answer 3

Thanks, but don't think those suggestions address the issue. Users will mostly just click the default when signing in, and that is to cache credentials, so we need a way to stop that from happening. MFA isn't going to work infor various reasons.

The users shouldn't need to sign into anything else - the machines currently have Office 2013, this will probably be upgraded to 2019 (minus Outlook), but there shouldn't be any need to sign into this - the files to be opened will all be on a network share or copied from a USB stick. Teams will only be needed for vocie and video calls.

The machines aren't domain joined so GPOs won't be possible either. I guess what I'm asking is whether there is a registry key or similar method which prevents Teams from caching credentials.

Thanks

Answer 4

I just came across this advice. Worth trying.

https://www.kapilarya.com/disable-microsoft-teams-auto-sign-in-to-domain-joined-account

Answer 5

This is incorrect. The user is NOT prompted to re-enter credentials after signing out. Must be cached somewhere, but how to disable? Clearly a security concern.