30.4 (L1) Ensure 'Disable Consumer Account State Content' is set to 'Enabled'

Information

This policy setting determines whether cloud consumer account state content is allowed in all Windows experiences.

The recommended state for this setting is: Enabled

The use of consumer accounts in an enterprise managed environment is not good security practice as it could lead to possible data leakage.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled :

Experience\Disable Consumer Account State Content

Impact:

Users will not be able to use Microsoft consumer accounts on the system, and associated Windows experiences will instead present default fallback content.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2(1)

Plugin: Windows

Control ID: 18cded23840219d9d12a4e1f1512eafe84f91ec6e669d16d13eb08d1ceff0964