+ Post New Thread
Results 1 to 11 of 11
Windows 8 Thread, Windows Store \ Microsoft Account? in Technical; Another one of those little problems I wonder if there's a better way around but can't see one at present... ...
  1. #1
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,673
    Thank Post
    168
    Thanked 221 Times in 204 Posts
    Rep Power
    67

    Question Windows Store \ Microsoft Account?

    Another one of those little problems I wonder if there's a better way around but can't see one at present...

    We've ordered in a couple of Dell Venue Pro 11 tablets for staff use, not joined to a domain at present. We want the staff to be able to install Windows Store apps as they need, said staff are also on Office 365 for email etc.

    As it stands the only method I can see for each person is:

    - set up a Microsoft (i.e. personal) account with their work email address
    - set up either local or linked Microsoft account on the device

    If I don't either set up the Microsoft account or give instructions how to do so the staff won't be able to use the Windows Store. Not sure if this changes once machines are domained, can anyone confirm?

    One day I hope MS will sort out this authentication mess they have with the two separate systems and enable Office 365 accounts to be used with the Store, wouldn't that just make so much more sense?!
    Last edited by gshaw; 2nd April 2014 at 12:19 PM.

  2. #2

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    Everything you have said is 100% correct and does not change when the machine is domain-joined.

    I'm certain that that full logon using Azure AD (which is the backend of O365) will come to Windows eventually, but I'd wager we're a few years off before it happens.
    Last edited by AngryTechnician; 2nd April 2014 at 01:20 PM.

  3. Thanks to AngryTechnician from:

    gshaw (3rd April 2014)

  4. #3
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,673
    Thank Post
    168
    Thanked 221 Times in 204 Posts
    Rep Power
    67
    What would be really powerful would be to have the Store as an Azure service so basically it'd be another 365 app e.g. https://store.yourdomain.ac.uk - at which point the organisation would have full control of what appears, for example a choice of...

    - approved apps only
    - pre-purchased apps via site license, click and download as required + free apps
    - full access to everything purchases need to be approved by organisation's Store admin before money is taken or set pre-paid limit e.g. £20 per user.

    I know MS are pushing InTune MDM as a way to manage some of this but would be nice to allow users to access the Store experience and breadth of choice whilst still giving admins a way to push out key apps and avoid runaway purchasing.

  5. #4

    Join Date
    Jul 2007
    Posts
    34
    Thank Post
    1
    Thanked 5 Times in 5 Posts
    Rep Power
    15
    You can join them to your domain and associate Microsoft Accounts to Domain Accounts. This allows you to maintain control over them while still allowing them to access the Windows Store. I haven't looked into automating this process, but I imagine there is a way (powershell?). To do it manually you go to PC Settings -> Accounts -> Your Account -> Connect to a Microsoft account.

  6. Thanks to disk from:

    gshaw (7th April 2014)

  7. #5
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,673
    Thank Post
    168
    Thanked 221 Times in 204 Posts
    Rep Power
    67
    I'm guessing the creation of those accounts is still manual though or does it auto-create them on demand? What controls do you get with GPOs, is it a case of "block access to Store" or something more granular? Just getting a dev network with 2012 R2 up at the moment but haven't had chance to join any Win8.1 devices to it yet...

  8. #6

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    Quote Originally Posted by disk View Post
    I haven't looked into automating this process, but I imagine there is a way (powershell?).
    There isn't. Accounts have to be created manually and linked to the domain account manually.

    Quote Originally Posted by gshaw View Post
    What controls do you get with GPOs, is it a case of "block access to Store" or something more granular?
    You can block the store entirely (easy to implement) or you can whitelist/blacklist individual apps that can be installed using AppLocker (more complicated). Both approaches can be applied on a per-user basis.

  9. Thanks to AngryTechnician from:

    gshaw (8th April 2014)

  10. #7

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,265
    Thank Post
    111
    Thanked 242 Times in 193 Posts
    Blog Entries
    1
    Rep Power
    74
    Is there a good place to learn this stuff? Once upon a time there were the resource kits, but now it just seems to be variable quality blogs in technet?

  11. #8
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,673
    Thank Post
    168
    Thanked 221 Times in 204 Posts
    Rep Power
    67
    Quote Originally Posted by psydii View Post
    Is there a good place to learn this stuff? Once upon a time there were the resource kits, but now it just seems to be variable quality blogs in technet?
    Seems these days we're often on our own and it's those who are willing \ able to play around and come up with viable solutions based on vague notes on TechNet that prove the most valuable. Still amazed Microsoft didn't have a simple fix on its site for a Windows Store bug I found after 20 minutes trying to set up one of our Surface RT's a few months back. Definitely need to up their game on that front and spend less on the pointless forum reps that just parrot irrelevant "answers" and ask you to "submit your feedback for future releases"

  12. #9

    Join Date
    Nov 2010
    Location
    Birmingham
    Posts
    79
    Thank Post
    13
    Thanked 8 Times in 8 Posts
    Rep Power
    9
    Screenshot (44).png

    GPO option thst might work although not tired it myself yet

    This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it.

    If you enable this policy setting, Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.

    If you disable or do not configure this policy setting, users will need to sign in with a Microsoft account.


    Computer Configuration > Admin Templates > Windows Components > App runtime > Allow Microsoft accounts to be optional

    Thank you,
    Will

  13. Thanks to william_tropico from:

    gshaw (20th May 2014)

  14. #10
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,673
    Thank Post
    168
    Thanked 221 Times in 204 Posts
    Rep Power
    67
    Next question is what counts as an "enterprise account" - is that an AD username or Office 365 one?

    Edit: looks like that setting only covers a couple of built-in apps, Store still needs the Microsoft Account

    http://exchange2010admin.blogspot.co...ement-for.html
    Last edited by gshaw; 20th May 2014 at 06:51 PM.

  15. #11

    Join Date
    Nov 2010
    Location
    Birmingham
    Posts
    79
    Thank Post
    13
    Thanked 8 Times in 8 Posts
    Rep Power
    9
    I would assume it is Office 365 account.

    On Domain computers / laptops we have disabled the store because of this. We have a 1:1 device scheme for post 16 students so they each have a surface rt and trying to explain that their school email account needs to be 'converted' to a MS account / separate MS account does feel like wasted time! (and Windows store behind a proxy is another issue )

    I do agree with what is said about using office365 for store downloads. can only hope it is soon

SHARE:
+ Post New Thread

Similar Threads

  1. Windows Store Accounts for the Kids
    By jstuttard in forum Windows 8
    Replies: 0
    Last Post: 5th September 2013, 05:10 PM
  2. Replies: 42
    Last Post: 30th November 2012, 10:32 AM
  3. Replies: 3
    Last Post: 3rd November 2012, 12:08 PM
  4. Windows / Store Box
    By rlculver in forum Network and Classroom Management
    Replies: 4
    Last Post: 14th September 2011, 04:09 PM
  5. Replies: 6
    Last Post: 1st April 2010, 01:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •