Back

Configure the "Accounts: Block Microsoft accounts" to organizational standards.


CONTROL ID
08613
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Configure Key, Certificate, Password, Authentication and Identity Management settings in accordance with organizational standards., CC ID: 07621

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Configure the "Accounts: Block Microsoft accounts" setting to "Users can't add or log on with Microsoft accounts". (C7CC2042-10C6-4D85-ADA7-F0B49FA70C44, Win8 Computer Security Compliance, 1.0)
  • (L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer. The recommended state for this setting is: `Users can't add or log on with Microsoft acc… (2.3.1.2, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
  • (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' Description: This setting determines whether applications and services on the device can utilize new consumer Microsoft account authentication via the Windows `OnlineID` and `WebAccountManager` APIs. The reco… (18.9.44.1, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
  • (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' Description: This setting determines whether applications and services on the device can utilize new consumer Microsoft account authentication via the Windows `OnlineID` and `WebAccountManager` APIs. The reco… (18.9.44.1, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
  • (L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer. The recommended state for this setting is: `Users can't add or log on with Microsoft acc… (2.3.1.2, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
  • Title: Set 'Accounts: Block Microsoft accounts' to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer.If you select the "Users can't add Microsoft accounts" option, users will not be able to c… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.1.1_Set_Accounts_Block_Microsoft_accounts_to_Users_cant_add_or_log_on_with_Microsoft_accounts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.1.1.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
  • Title: Set 'Accounts: Block Microsoft accounts' to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer.If you select the "Users can't add Microsoft accounts" option, users will not be able to c… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.1.1_Set_Accounts_Block_Microsoft_accounts_to_Users_cant_add_or_log_on_with_Microsoft_accounts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.1.1.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
  • Title: Set 'Accounts: Block Microsoft accounts' to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer.If you select the "Users can't add Microsoft accounts" option, users will not be able to c… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.1.1_Set_Accounts_Block_Microsoft_accounts_to_Users_cant_add_or_log_on_with_Microsoft_accounts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.1.1.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Accounts: Block Microsoft accounts' to 'Users can't add or log on with Microsoft accounts' Description: This policy setting prevents users from adding new Microsoft accounts on this computer.If you select the "Users can't add Microsoft accounts" option, users will not be able to c… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.1.1_Set_Accounts_Block_Microsoft_accounts_to_Users_cant_add_or_log_on_with_Microsoft_accounts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.1.1.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)