Policy CSP - Accounts


Accounts policies

Accounts/AllowAddingNonMicrosoftAccountsManually
Accounts/AllowMicrosoftAccountConnection
Accounts/AllowMicrosoftAccountSignInAssistant
Accounts/DomainNamesForEmailSync


Accounts/AllowAddingNonMicrosoftAccountsManually

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies whether user is allowed to add non-MSA email accounts.

Most restricted value is 0.

Note

This policy will only block UI/UX-based methods for adding non-Microsoft accounts. Even if this policy is enforced, you can still provision non-MSA accounts using the EMAIL2 CSP.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.


Accounts/AllowMicrosoftAccountConnection

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services.

Most restricted value is 0.

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 (default) - Allowed.


Accounts/AllowMicrosoftAccountSignInAssistant

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. Allows IT Admins the ability to disable the "Microsoft Account Sign-In Assistant" (wlidsvc) NT service.

The following list shows the supported values:

  • 0 - Disabled.
  • 1 (default) - Manual start.


Accounts/DomainNamesForEmailSync

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark

Scope:

  • Device

Specifies a list of the domains that are allowed to sync email on the device.

The data type is a string.

The default value is an empty string, which allows all email accounts on the device to sync email. Otherwise, the string should contain a pipe-separated list of domains that are allowed to sync email on the device. For example, "contoso.com|fabrikam.net|woodgrove.gov".


Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.

Accounts policies supported by Windows Holographic for Business