Information
This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in.
This policy only affects Windows Store apps that support it.
The recommended state for this setting is: 'Enabled'.
Rationale:
Enabling this setting allows an organization to use their enterprise user accounts instead of using their Microsoft accounts when accessing Windows store apps.
This provides the organization with greater control over relevant credentials.
Microsoft accounts cannot be centrally managed and as such enterprise credential security policies cannot be applied to them, which could put any information accessed by using Microsoft accounts at risk.
Solution
To establish the recommended configuration via GP, set the following UI path to 'Enabled':
Computer Configuration\Policies\Administrative Templates\Windows Components\App runtime\Allow Microsoft accounts to be optional
Note: This Group Policy path may not exist by default.
It is provided by the Group Policy template 'AppXRuntime.admx/adml' that is included with the Microsoft Windows 8.1 & Server 2012 R2 Administrative Templates (or newer).
Impact:
Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead.