Windows 8 Thread, Windows Store \ Microsoft Account? in Technical; Another one of those little problems I wonder if there's a better way around but can't see one at present...
2nd April 2014, 01:17 PM #1
Windows Store \ Microsoft Account?
Another one of those little problems I wonder if there's a better way around but can't see one at present...
We've ordered in a couple of Dell Venue Pro 11 tablets for staff use, not joined to a domain at present. We want the staff to be able to install Windows Store apps as they need, said staff are also on Office 365 for email etc.
As it stands the only method I can see for each person is:
- set up a Microsoft (i.e. personal) account with their work email address
- set up either local or linked Microsoft account on the device
If I don't either set up the Microsoft account or give instructions how to do so the staff won't be able to use the Windows Store. Not sure if this changes once machines are domained, can anyone confirm?
One day I hope MS will sort out this authentication mess they have with the two separate systems and enable Office 365 accounts to be used with the Store, wouldn't that just make so much more sense?!
Last edited by gshaw; 2nd April 2014 at 01:19 PM.
2nd April 2014, 02:18 PM #2
Everything you have said is 100% correct and does not change when the machine is domain-joined.
I'm certain that that full logon using Azure AD (which is the backend of O365) will come to Windows eventually, but I'd wager we're a few years off before it happens.
Last edited by AngryTechnician; 2nd April 2014 at 02:20 PM.
Thanks to AngryTechnician from:
3rd April 2014, 02:26 PM #3
What would be really powerful would be to have the Store as an Azure service so basically it'd be another 365 app e.g. https://store.yourdomain.ac.uk - at which point the organisation would have full control of what appears, for example a choice of...
- approved apps only
- pre-purchased apps via site license, click and download as required + free apps
- full access to everything purchases need to be approved by organisation's Store admin before money is taken or set pre-paid limit e.g. £20 per user.
I know MS are pushing InTune MDM as a way to manage some of this but would be nice to allow users to access the Store experience and breadth of choice whilst still giving admins a way to push out key apps and avoid runaway purchasing.
7th April 2014, 04:57 PM #4
- Rep Power
You can join them to your domain and associate Microsoft Accounts to Domain Accounts. This allows you to maintain control over them while still allowing them to access the Windows Store. I haven't looked into automating this process, but I imagine there is a way (powershell?). To do it manually you go to PC Settings -> Accounts -> Your Account -> Connect to a Microsoft account.
7th April 2014, 06:29 PM #5
I'm guessing the creation of those accounts is still manual though or does it auto-create them on demand? What controls do you get with GPOs, is it a case of "block access to Store" or something more granular? Just getting a dev network with 2012 R2 up at the moment but haven't had chance to join any Win8.1 devices to it yet...
8th April 2014, 12:02 PM #6
There isn't. Accounts have to be created manually and linked to the domain account manually.
Originally Posted by disk
You can block the store entirely (easy to implement) or you can whitelist/blacklist individual apps that can be installed using AppLocker (more complicated). Both approaches can be applied on a per-user basis.
Originally Posted by gshaw
Thanks to AngryTechnician from:
8th April 2014, 12:40 PM #7
Is there a good place to learn this stuff? Once upon a time there were the resource kits, but now it just seems to be variable quality blogs in technet?
20th May 2014, 07:29 PM #8
Seems these days we're often on our own and it's those who are willing \ able to play around and come up with viable solutions based on vague notes on TechNet that prove the most valuable. Still amazed Microsoft didn't have a simple fix on its site for a Windows Store bug I found after 20 minutes trying to set up one of our Surface RT's a few months back. Definitely need to up their game on that front and spend less on the pointless forum reps that just parrot irrelevant "answers" and ask you to "submit your feedback for future releases"
Originally Posted by psydii
20th May 2014, 07:44 PM #9
- Rep Power
GPO option thst might work although not tired it myself yet
This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it.
If you enable this policy setting, Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.
If you disable or do not configure this policy setting, users will need to sign in with a Microsoft account.
Computer Configuration > Admin Templates > Windows Components > App runtime > Allow Microsoft accounts to be optional
Thanks to william_tropico from:
20th May 2014, 07:49 PM #10
Next question is what counts as an "enterprise account" - is that an AD username or Office 365 one?
Edit: looks like that setting only covers a couple of built-in apps, Store still needs the Microsoft Account
Last edited by gshaw; 20th May 2014 at 07:51 PM.
20th May 2014, 07:56 PM #11
- Rep Power
I would assume it is Office 365 account.
On Domain computers / laptops we have disabled the store because of this. We have a 1:1 device scheme for post 16 students so they each have a surface rt and trying to explain that their school email account needs to be 'converted' to a MS account / separate MS account does feel like wasted time! (and Windows store behind a proxy is another issue )
I do agree with what is said about using office365 for store downloads. can only hope it is soon
By jstuttard in forum Windows 8
Last Post: 5th September 2013, 06:10 PM
By CyberNerd in forum Windows
Last Post: 30th November 2012, 11:32 AM
By SYNACK in forum Windows 8
Last Post: 3rd November 2012, 01:08 PM
By rlculver in forum Network and Classroom Management
Last Post: 14th September 2011, 05:09 PM
By DaveP in forum Windows
Last Post: 1st April 2010, 02:48 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)