Policy CSP - Accounts


Accounts policies

Accounts/AllowAddingNonMicrosoftAccountsManually
Accounts/AllowMicrosoftAccountConnection
Accounts/AllowMicrosoftAccountSignInAssistant
Accounts/DomainNamesForEmailSync

Accounts/AllowAddingNonMicrosoftAccountsManually

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies whether user is allowed to add non-MSA email accounts.

Most restricted value is 0.

Note

 This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountConnection

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.

Most restricted value is 0.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.

Accounts/AllowMicrosoftAccountSignInAssistant

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.

Note

 If the MSA service is disabled, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See Feature updates are not being offered while other updates are.

The following list shows the supported values:

  • 0 - Disabled.
  • 1 (default) - Manual start.

Accounts/DomainNamesForEmailSync

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies a list of the domains that are allowed to sync email on the device.

The data type is a string.

The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".

Accounts policies supported by Windows Holographic

Accounts policies supported by Windows Holographic for Business


Footnotes:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.