This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in. This policy only affects Windows Store apps that support it. If you enable this policy setting, Windows Store apps that typically require a Microsoft account to sign in will allow users to sign in with an enterprise account instead. If you disable or do not configure this policy setting, users will need to sign in with a Microsoft account. Countermeasure: Enable this setting. Potential Impact: Users will need to sign into their Windows apps with a Microsoft account. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsApp runtimeAllow Microsoft accounts to be optional (2) REG: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem!MSAOptional

[enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\App runtime\Allow Microsoft accounts to be optional (2) REG: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System!MSAOptional