Prevent addition of a personal Microsoft Account

[SimonInOz]

Hi,

 

Using W10 Edu 1809 in a domain setting with group policies. Is there any way to prevent students from adding their own personal Microsoft accounts to Windows? (Email & Accounts in settings).

 

Cheers

[tapb]

You could start with this: https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts

[SimonInOz]

Thanks, does this allow us to connect them to O365 with their domain account still?

[rosslaing]

There is a GPO for this - Computer Config -> Admin templates -> Onedrive: 'Allow syncing OneDrive accounts only for specific Organizations'

 

This will limit it to just your Tenant ID for O365 or any others you suggest. Im sure this became available in the 1809 ADMX's.

 

**Edit - Just read your original question, obviously this is just for onedrive. Not the microsoft accounts The above suggestion is what I would go with**

Edited August 26, 2019 by rosslaing

[mrcrazy04]

Thanks, does this allow us to connect them to O365 with their domain account still?

 

It still allows domain accounts to login, and I think it will allow Azure AD or other centrally managed logins - just blocking personal Microsoft accounts. It's probably worth testing on one machine to be sure though (as I haven't tested it).

[SimonInOz]

Thanks a lot for the updated info. Cheers