When created and applied, there are two ways you can sign In to Windows 10- either with a local user account, or a Microsoft account. The former generally uses a username & password, and the latter Is In the form of an email address & password. Whilst a Microsoft account does have It's benefits, given It's an online service, If It's compromised, the PC on which It's created on can also be affected. As such, In this tutorial, I will show you how to prevent users from creating Microsoft accounts on your computer.
The moment you establish an Internet connection, everything you do on the net, such as online banking, login to Facebook, access your email accounts and so forth, Is susceptible to exploitation. You never know If and when your user credentials will be compromised, and having an active Microsoft account, Is certainly part of this equation.
Where possible, It's good practice to keep sensitive data and login details locally, that Is, within the confines of your computer In an encrypted drive. For this very reason, It's best to use a local user account to log Into your PC, hence I will demonstrate how to completely prevent Microsoft accounts from being created.
To achieve this, I will be using the good old Group Policy Editor, that's native to Windows 10 Pro, Enterprise and Education editions. On the grounds you have either of these Installed, then this tutorial Is for you. So without further ado, let's get this started.
To access the Group Policy Editor, open the Run menu, enter gpedit.msc and hit OK.
The Group Policy Editor will now open, so navigate to the following directory.
Computer Configuration > Windows Settings Security Settings > Local Policies > Security Options
Then on the right pane, double-click on Accounts: Block Microsoft accounts.
Now via the drop-down menu, select Users can't add Microsoft accounts, and hit OK to finalize the process.
Here's a demonstration before the above setting was applied. I've navigated to Windows Settings > Accounts, and as you can see, the option to sign In with a Microsoft account Is active. I'll click on the link as arrowed.
I can either sign In with an existing Microsoft account, or create a new one. By the way, It's not my real email address!
And here's the result after applying the above setting. The link to sign In with a Microsoft account Is grayed out, hence Inaccessible. Only local user accounts can be created on my computer.
The good thing about applying this setting, Is that the majority of users are unaware that It exists In the Group Policy Editor. In fact, most average users do not know that the GPE Is available to begin with, and that's what makes this so effective.
To go back to It's original state and have Microsoft accounts active as per usual, refer to Step Three above and select This policy Is disabled from the drop-down menu as Illustrated below. Don forget to hit OK.