Windows 10: Block all consumer Microsoft account user authentication

How to configure this setting via gpmc.msc as the direct option is not available? The below option is not available in gpmc console.

Is there any other way to get the same output?


Computer Configuration\Administrative Templates\Windows Components\Microsoft account

:)

 

Windows 10 GPO not working "Block Microsoft Accounts"

There is a new Group Policy setting since Version 1703: Windows Components\Microsoft Account\Block all consumer Microsoft account user authentication

This should work.

 

Microsoft Account authentication

After more research, I have found my answer. It looks like the issue was that Microsoft released a new Microsoft Authenticator app with the features first introduced in Microsoft Authenticator Beta. The new app received a prompt to approve access to my Microsoft
Account when signing on from a new PC, though I find it strange that the beta app wasn't directly upgraded to the new version of the app.

Microsoft now has three 2 step authentication apps available in the store for Windows 10 Mobile:

• Authenticator - original app from Windows Phone 8
• Microsoft Authenticator Beta - originally released to Windows 10 users when Windows 10 Mobile was only available on the Windows Insider program.
• Microsoft Authenticator - the official Windows 10 app no longer in beta

 

Windows Microsoft account authentication

I have a valid Microsoft account and a Windows 10 PC with Hello/PIN account login enabled. I also have the Microsoft Authenticator app installed on an iPhone and configured for the Microsoft account. Additionally, I have two step authentication configured
for the Microsoft account. With all of that said, I have become very exasperated while trying to unravel the various authentication paths (and their security implications) through this multi level login security scheme. I find the associated account security
documentation to be woefully inadequate. Thus, I would like to pose the following list of questions for starters.

1. Does Windows Hello/PIN amount to a two step verification login procedure for my Microsoft account?

2. Does approving a Microsoft Authenticator login attempt (without two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

3. Does approving a Microsoft Authenticator login attempt (with two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

4. If answers to both 2 and 3 are yes, then what does explicit set up of two step authentication do?

5. Does a coherent, comprehensive document explaining Microsoft account security configuration exist somewhere?

6. If the answer to 5 is yes, wherer is it?

Thanks in advance.