Windows 10: Disable adding email/Microsoft accounts to Windows 10

Is there a way to prevent people from adding any email/Microsoft accounts to Windows 10?
I found the option in GPEdit
Local -> Computer Config -> Windows Settings -> Security Options -> Accounts: Block Microsoft accounts

I set it to Users can't add Microsoft accounts, ran gpupdate /force and restarted the system.
Still am able to add email accounts, and a Microsoft one, if indirectly for the later.

:)

 

Adding a user in Windows 10

I added a 2nd person to my Win10 desktop but did it a little differently. First I added the user without the email, so it was not a Microsoft account, kind of like how it used to be in Win 7, then later on I switched that account to a Microsoft account.
At that point they started using their Windows Live email and password to log into their Windows 10 account.

 

Block Microsoft Account - GP setting not working in Pro

Windows 10 Pro - Ver 1607 - Build 14393.0

So I found instruction for disabling people from adding their personal Microsoft account to Windows in Group Policy.

I set that option and tested, but it does not work.

I can go to Setting -> Accounts -> Email & app accounts, add my MS email account, and now Windows thinks I am that person again.

Or, when I start any UWP app like Contact Support, it prompts me for my MS account, and I can log into it there with no issue.

Clicking on the link, Add a Microsoft account, does nothing when clicked.

So is this a limitation on Pro, like disabling Cortana and the Store to do this with GP. Nothing online says anything to that effect, and neither does GP Edit.

If so, what are the registry keys I need to change to prevent this.

Also, is there a setting to prevent any and all third party email account to be added to Windows.

***Post moved by the moderator to the appropriate forum category.***

 

OK. I found an answer.
You need to modify two registry entries for this to work. Or at least, it is what I needed to do at least.
First Entry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Add or modify NoConnectedUser to 3
Second Entry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount
Add or modify value to 0


Reboot isn’t necessary and it will apply to the current account.