Ever since the release of Windows 8, Microsoft has been pushing users to sign in to Windows operating system with a Microsoft account, and Windows 10 is no different. Right from the time of installation, Windows 10 tries to push users to sign in with a Microsoft account.
Use of Microsoft account in Windows 10
There are a couple of benefits of signing in to Windows 10 with a Microsoft account: you can use the digital personal assistant Cortana, download and install apps from the Store (not required for free apps), and sync your settings across your PCs.
While it’s possible to install and use Windows 10 without a Microsoft account and install apps from the Store without converting your local account to Microsoft account, Windows 10 always tries to switch your account to Microsoft account.
For instance, if you’re using a local user account and have signed in to the Store app using a Microsoft account, you will often see prompts asking to enter your local user account to easily convert your local user account into Microsoft account.
If you’re not interested in the Cortana or located in a region where Cortana is not currently available, you can completely block or disable Microsoft accounts in Windows 10.
Yes, those of you who prefer a local account to Microsoft account will be glad to know that you can disable or block Microsoft accounts in Windows 10. Windows 10 includes a provision under Group Policy to block Microsoft accounts and one can enable this policy to block or disable Microsoft accounts in Windows 10.
For those who are curious, you will be able to install apps from the Store even after disabling or blocking Microsoft account.
How to block or disable Microsoft account in Windows 10:
Note: Since Local Group Policy Editor is not available in the Home edition of Windows 10, this guide is limited to Windows 10 Pro and Enterprise editions. We will try to add a workaround for users on Home edition once we manage to block Microsoft accounts via Registry.
Step 1: Type Edit group policy in Start menu or taskbar search box and then press Enter key to open Local Group Policy Editor. One can also type Gpedit.msc in the search or Run command box and then press Enter key to open the Group Policy Editor.
Step 2: In the Local Group Policy Editor, navigate to the following policy:
Computer Configuration > Windows Settings > Security Settings > Local Polices > Security Options.
Step 3: On the right side, locate the entry named Accounts: Block Microsoft accounts and then double-click on it to open its properties.
Step 4: Under the Local Security Setting tab, click on the drop-down box to see the following three options:
# This policy is disabled
# Users can’t add Microsoft accounts
# Users can’t add or log on with Microsoft accounts
You need to select a policy between Users can’t add Microsoft accounts and Users can’t add or log on with Microsoft account.
If you select Users can’t add Microsoft accounts, users on the PC will not able to add new Microsoft accounts. This also means that one can’t switch a local account to Microsoft account. This is the best option if you’re already signing in to Windows 10 with a Microsoft account but don’t want to add additional Microsoft accounts. This policy is also ideal for users currently using a local user account.
And if you select Users can’t add or log on with Microsoft accounts, users who are currently using a Microsoft account to sign in to Windows 10 won’t be allowed to log on using a Microsoft account. So if you’re already using a Microsoft account, you should first switch your Microsoft account to a local account before applying this policy.
Go for this policy if you are already using a local account and want to completely block Microsoft accounts in Windows 10. If you’re using Microsoft account, please switch to a local account first and then apply this policy.
After selecting the right policy, click the Apply button. You might need to sign out and sign in again.
The Users section of the Settings app might show “Some settings are managed by your organization” message in red color. Also, when you try to add a Microsoft account, you will get an error.
If you have any queries, feel free to ask in comments.
MrSmickety says
So glad you posted this. I went through the options, 1 & 2 did not work (the regedit keys did not exist). 3 worked like a charm.
Since getting a new laptop I find the Microsoft Account popups very irritating. It’s also frustrating that they want to force you to use Microsfot Account to login to the local machine! No, I’m not giving you my email, phone #, and birthdate AND local login password.
kim says
I don’t have a Microsoft account. What I am after is blocking everything from Microsoft but critical updates. After the updates I don’t want Microsoft snooping in my personal business. Their error reporting “service” has NEVER been of any help to me. Also, their “troubleshooters almost always come back with “can’t access” or “could not identify the problem”. The “troubleshooters” and the “error reporting ‘service'” are useless. Even though they NEVER work: it gives Microsoft another opportunity to snoop. Is there a 3rd party firewall that can be used to block Microsoft from snooping? I’m not into any illegal activities; I just believe that EVERYONE has the right to protect their privacy as deeply as they want. Just going along with what Microsoft demands is pure bovine excrement, and could be dangerous in the future; especially when disagreeing with a hostile government!
Joshua88 says
Note: Since Local Group Policy Editor is not available in the Home edition of Windows 10, this guide is limited to Windows 10 Pro and Enterprise editions. We will try to add a workaround for users on Home edition once we manage to block Microsoft accounts via Registry.
Three years later, how are you coming with this registry fix?
Thank you.
Judy says
We have had a pastor resign from our church and he has a Microsoft password on it. I can get into it, but we want to take him off from entirely and use the computer without a password. Also we do not have internet service either. How can we do this or do we have to get a computer expert in to take care of it.
Jegan says
I made a mistake by selecting the policy to disable the Microsoft account login. My admin login was the Microsoft login. Now I am not able to add any new account or change the policy back as there is no admin account. Is it possible to be reversed. Please let me know
Lou says
The family user account I set up will not let me delete it. It only has a user account BLOCK option. I can’t delete the account.
ponteley says
GPO >computer conf,>Admin Template>System>Logon> Exclude Cred. providers: add WLIDcredentialprovider CLSID from the registry.
Steve says
That won’t work. All you have to do is do a PC reset or restore, it’ll defeat its purpose.
Hadrins says
So, if you do this and want to install MS Office what happens? if you don’t do this and an employee is let go, how do you convert that account to a local and access his files? What a potential for a big risk.
Jessica/darkocean says
When you figure out how to do the same for home accounts let me know, and please hurry! I woke up to day and discovered two accounts that I did not make on the account list! Something fishy is going on here. Time to dump my anti virus as it’s obviously crap.
Frank Baldassarre says
I had a local login setup to my Win 10, then Microsoft came on and started to be my login through the Microsoft account. I went on to Group Policy and selected Users Can’t Add or Logon with Microsoft Account. Then when I rebooted I now get no login prompt at all. IE: I Can’t logon to Windows. How can I get back to my Windows login?
Thanks,
Eden Ferreira de Oliveira says
I followed your procedure, but unfortunately, I couldn’t disable the Microsoft account option on my Windows Windows.
I have tried a few options available on the web, but none of them worked.
Environment:
Windows 10 Enterprise Edition 1511 (Build 10586.164)
Joined to domain
1st attempt
1) GPO:
Computer Configuration > Windows Settings > Security Settings > Local Polices > Security Options
I Changed the Policy “Accounts: Block Microsoft accounts” = Users cant add or log on with Microsoft accounts
2) Registry (1)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Settings]
“AllowYourAccount”=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount]
“value”=dword:00000000
Registry (3)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
In the right pane, you’ll see a value named NoConnectedUser. If the value doesn’t exist (On my Windows 10 Build before 1511, valeu wasnt there), right-click on the empty space to create a DWORD value and name it NoConnectedUser.
set the value to 3 to block users from either adding or logging on with Microsoft account.
4) Registry (4)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount] “value”=dword:00000000
Edit: This will also block Pin Signon (& most options on the sign-on options window) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions] “value”=dword:00000000
As soon as I make the changes to the registry, I reboot the computer, then I open Windows store and try to buy or download a software. I would expect the error saying I cannot use Microsoft account.
Appreciate if you can help me figure out why my windows 10 1511 doesn’t apply this change.
Lorie Lund says
I upgraded to windows 10 and they had a typo when I registered -> .comn This is my work computer.
I can no longer sign in and I am blocked from signing into Microsoft on my personal computer for trying my normal password too many times. For 2 days, going on 3, no one at Microsoft can help my issue. I can get into command prompt but only with a Download tool on USB…since using that, which is windows 10, will it block me. I am the only sign on for this computer and i cannot verify the email address for my password to work. I am extremely frustrated!
below is my personal email. I hope you have some good advice for me…Thanks.
Eric says
This didn’t work for me. I had edit these registry keys:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount] “value”=dword:00000000
This will block Pin Sign On (& most options on the sign-on options window) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions] “value”=dword:00000000
Állison Batista says
It seems a bit worse: Microsoft is trying to push on customers like the gaming enterprises, like Blizzard, EA, …, are doing. To use their products, you must be registered on their servers (and you are incapable of build an unregistered server) and must stay online. This obviously avoids software piracy, but limits a lot any capabilities a software can offer. Unfortunately, enterprises simply don’t think on the user side, just on their side.
MikeFromMarkham says
If you do choose to disable or block Microsoft accounts, will you still get nagged to use one whenever you open the Store app? Will this be like the constant resurfacing of Skype or Windows 10 update patches that I’ve repeatedly hidden on my Windows 7 and 8.1 computers? Seems to me Microsoft is incapable of taking No for an answer in these instances.