locked
Blocking personal MS \ Gmail accounts RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I was wondering if you can stop users from connecting new accounts. We had a lady connect her gmail account to this page, then was syn stuff out of our organization. The only account that should be in here is their domain account that they sign in with. I have found a way to stop them from adding a Email & App account for like mail and calendar. 

    Is there a GPO to block this page or Gray it out. I dont care if they sign into 365 with there MS account and when they login it will add their account. If i can get it grayed out, i would like to limit to accounts in our domain and not gmail. Unless there is harm in blocking this page from a user. I am also working getting devices hybrid join to our domain instead of register, so I am not sure if i need this page for that. 

    Thank you for your help up front. 

    Alec B Moeller

    Monday, September 24, 2018 9:21 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Alec,

    We can’t block Access work or school feature actually, but we can hide this interface, same effect finally.

    Open group policy editor, navigate to Computer Configuration –> Administrative Templates –> Control Panel - > Settings Page Visibility

    Enable, type hide:workplace in box, OK, reboot computer and you will find that Access work or school interface disappear. Also, you can hide other interface which you don’t want your user see.

    Refer to this blog for more information:

    Hiding pages in Settings with Windows 10 1703

    https://blogs.technet.microsoft.com/mniehaus/2017/04/13/hiding-pages-in-settings-with-windows-10-1703/

    Regards

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, September 25, 2018 1:41 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you this information, it was very helpful. I was playing around in the registry and found this key that hided it too. I would rather use the GPO to define this, then specify registry keys.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowWorkplace]

    "value"=dword:00000000

    AND

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount]

    "value"=dword:00000000

    Just one more question then i will mark this complete. Just like any GPO setting out there that there is setting for. Is there a list of strings of menus you can hide and show?? Or show i just go off the name of the menu on the left hand side of the setting menu?

    Alec B Moeller

    Tuesday, September 25, 2018 7:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    

    Sorry for late reply, I was very busy these days due to my exam.

    Ok, return to your question:

    >>Is there a list of strings of menus you can hide and show? No, I can’t find such a list or article. What I can find out is a list of settings name which can be hidden. https://docs.microsoft.com/en-us/windows/uwp/launch-resume/launch-settings-app

    About the registry path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings

    We shouldn’t modify the left side key value, of course, your workaround is very good, which can Disable Microsoft Accounts in Windows 10, but it’s hard to recognize every key.

    For example, beside two keys you have pointed out, I just know one key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions] when we configure its value as 00000000, we disable PIN function in Windows 10.

    I search online for a long time, only find this case has something related to these registry, note Bill2772’s reply.

    https://community.spiceworks.com/topic/1632828-accounts-block-microsoft-accounts

    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Regards

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 27, 2018 8:34 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    No Problem on the turnaround time, I understand.

    Thank you for this information, I was able to hide the menu using the GPOs you stated. We as a company are deciding on what we want to hide the menu or have it grayed out. I completely understand what you are saying about not changing the value like that.

    We may look into the sign-in option also, but if user wants to use different windows hello feature i dont think we are going to stop that.

    Last question on the Block MS account setting, now that you brought that up. If I have it set to Users can’t add Microsoft accounts. Will that stop Azure Ad joining or O365 account joining? As we are in the process of rolling out 365 and moving a lot of environment to Azure Hybrid join.

    Alec B Moeller


    Friday, September 28, 2018 9:51 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    No, we block Microsoft settings, will not influence O365 account login verification, your clients devices still join in  Azure Hybrid.

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 2, 2018 1:10 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Alec

    How do you stop them from adding a Email &App account for app mail?

    Thank You 

    Jose Mena 

    Friday, August 7, 2020 11:18 PM