Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To allow or block Microsoft account connections on managed Windows devices, create a Windows 10 and later Settings Catalog profile in Intune, add Accounts > Allow Microsoft Account Connection, choose Allow or Block, assign the profile, and check its deployment status after devices check in. The policy controls Microsoft account use for non-email connection authentication and services; it applies to the device, not an individual user.
What the policy controls
The Windows Accounts Policy CSP describes AllowMicrosoftAccountConnection as controlling whether a user may use a Microsoft account for non-email-related connection authentication and services. It does not govern email-related use. The setting is device-scoped, so its effect is not limited to the user or group assigned the Intune profile once it is applied to a device. Microsoft’s Policy CSP – Accounts lists support for Windows 10 version 1507 and later, on Pro, Enterprise, Education, and IoT Enterprise editions, including IoT Enterprise LTSC.
Choose Allow or Block
| Intune choice | Windows CSP value | Effect |
|---|---|---|
| Allow | 1 (the CSP default) | Permits the covered non-email Microsoft account connections and services. |
| Block | 0 | Does not allow the covered connections and services. |
Choose based on the intended account-use policy for the target devices and the other people who may use them. Because the setting is device-scoped, consider that device-wide impact when selecting assignments. An example that sets this policy to Block in Microsoft’s HoloLens 2 advanced security baseline is specific to that baseline; it does not establish Block as the default for Windows generally.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchConfigure the setting in Intune
- Sign in to the Microsoft Intune admin center with an account that has at least the built-in Policy and Profile Manager role.
- Go to Devices > Manage devices > Configuration > Create > New policy. Select Windows 10 and later as the platform and Settings catalog as the profile type.
- Name the profile, continue to Configuration settings, and select Add settings. Search for Allow Microsoft Account Connection. Microsoft’s Windows device-restriction reference places it under Accounts and identifies its CSP path as
Accounts/AllowMicrosoftAccountConnection. - Add the setting and choose Allow or Block.
- Continue through scope tags if your organization uses them, assign the profile to the intended users or groups, review the configuration, and create the profile.
- After devices check in for configuration updates, open the profile’s reporting view and review per-setting status for success, conflict, or error.
Microsoft’s Settings catalog guidance says a new configuration is applied at the device’s next check-in for configuration updates. If you later set this setting to Not configured in the profile, that profile stops managing it; another policy or the device user may then change it.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Check scope, conflicts, and related policies
Account for device-wide impact
Although Intune assignments can target users or groups, this CSP setting is device-scoped. Microsoft’s Enterprise State Roaming guidance cautions that the MDM policies covered there apply device-wide and advises using them only on corporate-owned devices because they affect other user accounts. That caution is documented in the Enterprise State Roaming context; consider it when choosing targets and validate the behavior in your own managed-device scenario.
Investigate conflicting configurations
If the profile reports a conflict, inspect Intune’s per-setting reporting for other configurations of the same setting. Policies assigning different values to the same setting can conflict; resolve the competing assignments or values, then allow the device to check in again and review status.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Do not confuse it with the Sign-In Assistant service policy
AllowMicrosoftAccountConnection is not the same as AllowMicrosoftAccountSignInAssistant, which controls the Microsoft Account Sign-In Assistant service, wlidsvc. Microsoft documents possible consequences of disabling that service policy in some Windows 10 circumstances: Windows feature updates may not be offered, and subscription activation or initial digital-license activation may be disrupted. Those consequences concern the service policy and should not be attributed to the connection policy discussed here.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.
