Skip to main content


Prevent Users From Creating Microsoft Accounts


When created and applied, there are two ways you can sign In to Windows 10- either with a local user account, or a Microsoft account. The former generally uses a username & password, and the latter Is In the form of an email address & password. Whilst a Microsoft account does have It's benefits, given It's an online service, If It's compromised, the PC on which It's created on can also be affected. As such, In this tutorial, I will show you how to prevent users from creating Microsoft accounts on your computer.


The moment you establish an Internet connection, everything you do on the net, such as online banking, login to Facebook, access your email accounts and so forth, Is susceptible to exploitation. You never know If and when your user credentials will be compromised, and having an active Microsoft account, Is certainly part of this equation.

Where possible, It's good practice to keep sensitive data and login details locally, that Is, within the confines of your computer In an encrypted drive. For this very reason, It's best to use a local user account to log Into your PC, hence I will demonstrate how to completely prevent Microsoft accounts from being created.

To achieve this, I will be using the good old Group Policy Editor, that's native to Windows 10 Pro, Enterprise and Education editions. On the grounds you have either of these Installed, then this tutorial Is for you. So without further ado, let's get this started.

Step One:
To access the Group Policy Editor, open the Run menu, enter gpedit.msc and hit OK.



Step Two:

The Group Policy Editor will now open, so navigate to the following directory.
Computer Configuration > Windows Settings Security Settings > Local Policies > Security Options

Then on the right pane, double-click on Accounts: Block Microsoft accounts.



Step Three:
Now via the drop-down menu, select Users can't add Microsoft accounts, and hit OK to finalize the process.



Step Four:
Here's a demonstration before the above setting was applied. I've navigated to Windows Settings > Accounts, and as you can see, the option to sign In with a Microsoft account Is active. I'll click on the link as arrowed.



Step Five:
I can either sign In with an existing Microsoft account, or create a new one. By the way, It's not my real email address!



Last Step:
And here's the result after applying the above setting. The link to sign In with a Microsoft account Is grayed out, hence Inaccessible. Only local user accounts can be created on my computer.



Final Thoughts:
The good thing about applying this setting, Is that the majority of users are unaware that It exists In the Group Policy Editor. In fact, most average users do not know that the GPE Is available to begin with, and that's what makes this so effective.

To go back to It's original state and have Microsoft accounts active as per usual, refer to Step Three above and select This policy Is disabled from the drop-down menu as Illustrated below. Don forget to hit OK.






Comments

Popular posts from this blog

How To Use Sandboxie In Windows 10

When navigating online and downloading & executing applications, clicking on links, visiting websites that you're not familiar with and so forth, your computer Is vulnerable to being Infected with a virus. The last thing you need, Is to have your sensitive files compromised or hit with a nasty piece of malware. To prevent this, In this tutorial, I will show you how to safely perform all the above and more, by using a software named Sandboxie.

Create A Bootable USB Flash Drive

If you have a Bootable ISO Image file of the Windows operating system, obviously the Intention Is to burn It to disc and boot from your PC thereafter. However, optical drives are slowly being phased out In manufacturing & shipping of new computers, so what do you do from here? The alternative Is to create a bootable USB flash drive, and I will show you exactly how It's done. The process Is quite simple, yet a lot of users fail to grasp the concept.


Open The Command Prompt In Any Directory

A very powerful tool native to the Windows platform, Is the Command Prompt that allows users to perform an array of tasks, such as renaming and deleting files & folders, formatting disks and the list goes on. Sometimes, you need to navigate to certain directories by executing commands, which can be a lengthy and somewhat frustrating process. As such, In this tutorial, I will show you how to easily open the Command Prompt In any directory/folder of your choice.