Windows 10: Allow or Block Microsoft Accounts in Windows 10

How to: Allow or Block Microsoft Accounts in Windows 10

How to Allow or Block Microsoft Accounts in Windows 10


Information Have you ever used Outlook.com, Hotmail, Office 365, OneDrive, Skype, Xbox, or Windows? The email address and password you use for any of those services is your Microsoft account.

Your Microsoft account gives you access to apps and games from Microsoft Store, and lets you see your settings and other stuff across multiple Windows 10 devices.

You can add a sign in to Windows 10 with a local account or Microsoft account.

If wanted, you are able to block Microsoft accounts on your Windows 10 PC with either of the following security policy settings:

• Users can't add Microsoft accounts - Users will not be able to sign in to any currently existing Microsoft accounts on the PC.
• Users can't add or log on (sign in) with Microsoft accounts - In addition to the above, users will not be able to sign in to Windows 10 with existing Microsoft accounts. Users will only be able to sign in to Windows 10 with a local account.

This tutorial will show you how to allow or block Microsoft accounts on your Windows 10 PC.

You must be signed in as an administrator to allow or block Microsoft accounts on the PC.

CONTENTS:

• Option One: Allow or Block Microsoft Accounts in Local Security Policy
• Option Two: Allow or Block Microsoft Accounts using a REG file

EXAMPLE: Microsoft account (video from Microsoft)







OPTION ONE [/i] Allow or Block Microsoft Accounts in Local Security Policy


Note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.

1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Navigate to Local Policies and Security Options in the left pane of Local Security Policy. (see screenshot below)



3. In the right pane of Security Options, double click/tap on the Accounts: Block Microsoft accounts policy to edit it. (see screenshot above)

4. Select the setting below you want to apply for this security policy, and click/tap on OK. (see screenshot below)

• This policy is disabled (default)
• Users can't add Microsoft accounts
• Users can't add or log on with Microsoft accounts

5. When finished, you can close the Local Security Policy window if you like.





OPTION TWO [/i] Allow or Block Microsoft Accounts using a REG file


Note The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

NoConnectedUser string value

(delete) = Allow Microsoft accounts (default)
1 = Users can't add Microsoft accounts
3 = Users can't add or log on with Microsoft accounts

1. Do step 2 (allow), step 3 (block - can't add), step 4 (block - can't add or sign-in) below for what you would like to do.


2. To Allow Microsoft Accounts
NOTE: This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.

Allow_Microsoft_accounts.reg

Download

3. To Block Microsoft Accounts so "Users can't add Microsoft accounts"
A) Click/tap on the Download button below to download the file below, and go to step 5 below.

Cant_add_Microsoft_accounts.reg

Download

4. To Block Microsoft Accounts so "Users can't add or log on with Microsoft accounts"
A) Click/tap on the Download button below to download the file below, and go to step 5 below.

Cant_add_or_sign-in_with_Microsoft_accounts.reg

Download
5. Save the .reg file to your desktop.

6. Double click/tap on the downloaded .reg file to merge it.

7. When prompted, click on Run, Yes (UAC), Yes, and OK to approve the merge.

8. You can now delete the downloaded .reg file if you like.

That's it,
Shawn


Related Tutorials

• How to Enable or Disable User Accounts in Windows 10
• How to Check if User is a Local Account or Microsoft Account in Windows 10
• How to Add a Local Account or Microsoft Account in Windows 10
• How to Switch to a Local Account from a Microsoft Account in Windows 10
• How to Switch to a Microsoft Account from a Local Account in Windows 10
• How to Add or Remove Aliases for your Microsoft Account
• How to Change the Primary Alias for your Microsoft Account
• How to Turn On or Off Two-step Verification for your Microsoft Account
• How to Change Sign-in Preferences of your Microsoft Account Aliases
• How to Enable or Disable Password Expiration for Your Microsoft Account
• Add or Remove Trusted Devices Associated with your Microsoft Account in Windows 10
• How to Remove Devices from your Microsoft Account
• How to Link Microsoft Account to Digital License for Windows 10 Activation
• How to Turn On or Off Sync Your Settings in Windows 10
• How to Use Microsoft Privacy Dashboard to Manage Your Privacy on the Cloud in Windows 10

:)

 

'Only see websites on the allowed list' check box missing on family safety website for windows 10

It appears that Microsoft remove the ability to have a while list on windows 10. I want to block all website and only allow the websites on the allowed list. The check box on the family safety website only shows on accounts with devices that are windows
8.1. I really hope their working on this. Does anyone know if Microsoft has acknowledged this and are going to support this in the future on windows 10?

 

Family Safety Web Filtering for Children

I am having some problems getting the Family Safety settings setup correctly on Windows 10. Previously I had my kids setup in Family Safety with Windows 8.1 local machine accounts that only allowed them to view sites that I added to the Allowed List,
and blocked all others automatically. Upon upgrading to Windows 10, I had to create them child Microsoft accounts and sign them into Windows 10 with them to enable Family Safety. This worked, and both machines are now running Family Safety. The problem
is, I no longer have the ability to allow them to only view sites on the Allowed List. On the web console I have the ability to block adult content, and I do have Allow and Block lists, but I have no way to only allow only sites on the Allowed List. According
to the Microsoft Family Safety Article found here (http://windows.microsoft.com/en-us/windows-10/set-child-limits), there should be the option "Only see websites on the allowed list." in the web console, but I do not see that particular option.
Has anyone else run into this, or am I missing something? Thanks!

 

Thank you omidsolo. *Smile

Process Monitor only showed the value in the tutorial getting changed by the group policy.

The other is just for the "Microsoft Account Sign-in Assistant" service. It was not needed for me to be able to allow or block Microsoft accounts.