Office365 on Xbox - How to Block

[bwestlake]

We have had some students using there school emails on there home xbox's.

 

One of which lost some money when his account was banned or something and decided to let it all out to us, nothing to do with us but he thought it was!

 

Just wondering if anyone has had issues like this or know how to block our domain from being used with an xbox?

[fairm010]

Its simple enough using Mail Flow rules to stop receiving the messages from @xbox.com or whatever their domain is but I'm unsure about blocking its use to sign up / into Xbox live.

[tmoon-mint]

I have never even thought about this before, I would be very interested to know if it is possible to block this as well. Might be simply worth outlining that school email addresses are for educational use only. Might be worth putting it in your AUP.

[apearce]

Hi,

They would have had to create a Microsoft account to do this (a live account) rather than just use their Office 365 account username and password. This also means when they leave the school their live account will still be active as you have no control over it.

 

There isn't very much you can do to prevent it other than trying to stop the verification emails that come from Live so they can't confirm the email address. I think (and i mean i think) you have to have a verified account before you can purchase anything with that live account.

[FN-GM]

Are they using the schools email address for xbox or are they signing in with the office 365 credentials?

[bwestlake]

Not sure, I know he showed us his emails from Xbox on the academy email system (office365) but that was about it

[apearce]

Not sure, I know he showed us his emails from Xbox on the academy email system (office365) but that was about it

 

Sound like he has registered his Office 365 account as a Microsoft Live ID.

[EduTech]

Hi,

 

Xbox Services utilize Microsoft Accounts (Live ID) to sign-in to Online Service. They DO NOT use Work Accounts (Organizational Accounts). If a end-user wants to sign-up for this service using an existing e-mail address such as contoso.com as oppose to outlook.com they can do this and in which case an e-mail would be generated and sent to which e-mail service contoso.com utilizes for e-mail. In your case this would be Office 365 Exchange Online which is why these students would have e-mails from Xbox in there Inbox.

 

The problem here is that if students or anyone for that matter does this, they will be relying on them having access to that Inbox for the lifetime of the Microsoft Account. If a student leaves the education establishment they would loose access to there e-mail account (most likely) which would in theory mean that the Microsoft Account would still work but they wouldn't be able to validate there account through any form of e-mail validation method and so in which case you should strongly discourage them from doing this.

 

Microsoft Accounts require 2 forms of Security Validation methods to be added to the account (alternative e-mail & telephone number) if at any point the student/end-user needs to go through security validation i.e. if they contact Microsoft Support, Billing Support etc. and they do not have access to such then this would cause them issues.

 

I hope that helps,

 

Regards,

James.