GCPW (Google Credential Provider for Windows) - Disable creation of local profiles

[David44]

We have GCPW set up so that some users can sign in to Domain joined Windows 10 PCs with their Google account. This is possible because they have the 'AD accounts' attribute set on their Google account so when the use their Google credentials, they get matched to their AD account and that is what the are signed in to Windows as. This all works great.

 

Some other users have a Google account but we don't want them to be able to sign in to Windows with it (yet). These users don't have the 'AD accounts' attribute set up on their Google accounts. Unfortunately, if these users try to sign in to a PC with their Google credentials, rather than a nice error, they get logged in to Windows with a local profile.

 

How do I stop GCPW creating a local profile for these users?

[TheHyperTechie]

As far as I'm aware, this is standard behavior for GCPW - if you are not using the AD attribute setting. I use GCPW for our staff without the AD option as we ditched our server a while ago, along with Active Directory. When a new user signs into to GCPW it creates them a local account on the device. I may be wrong, but I don't think there is a way around this...