Accounts CSP

The Accounts configuration service provider (CSP) is used by the enterprise (1) to rename a device, (2) to create a new local Windows account and join it to a local user group. This CSP was added in Windows 10, version 1803.

The following diagram shows the Accounts configuration service provider in tree format.

Accounts CSP diagram

./Device/Vendor/MSFT/Accounts
Root node.

Domain
Interior node for the account domain information.

Domain/ComputerName
This node specifies the DNS hostname for a device. This setting can be managed remotely, but note that this not supported for devices hybrid joined to Azure Active Directory and an on-premises Active directory. The server must explicitly reboot the device for this value to take effect. A couple of macros can be embedded within the value for dynamic substitution. Using any of these macros will limit the new name to 15 characters.

Available naming macros:

Macro Description Example Generated Name
%RAND:<# of digits> Generates the specified number of random digits. Test%RAND:6% Test123456
%SERIAL% Generates the serial number derived from the device. If the serial number causes the new name to exceed the 15 character limit, the serial number will be truncated from the beginning of the sequence. Test-Device-%SERIAL% Test-Device-456

Supported operation is Add.

Users
Interior node for the user account information.

Users/UserName
This node specifies the username for a new local user account. This setting can be managed remotely.

Users/UserName/Password
This node specifies the password for a new local user account. This setting can be managed remotely.

Supported operation is Add.

Users/UserName/LocalUserGroup
This optional node specifies the local user group that a local user account should be joined to. If the node is not set, the new local user account is joined just to the Standard Users group. Set the value to 2 for Administrators group. This setting can be managed remotely.

Supported operation is Add.