How to Enable or Disable Microsoft Accounts on Windows 11

What is a Microsoft Account?

A Microsoft account is the single login username and password you use to access Windows 11, along with built-in services like OneDrive, Outlook, and Xbox. Understanding this login type helps you decide whether you want to block Microsoft accounts on shared computers to stop other users from adding new accounts or linking personal cloud services to your PC.

A local account is the opposite. The username and password exist only on this PC, and nothing signs you in to online services automatically.

Why would you want to block Microsoft accounts? On shared computers or work computers, you might want to stop people from adding new Microsoft accounts. That keeps personal cloud services, such as OneDrive sync or a personal email profile, off a machine that is not meant to have them. Windows 11 gives you tools to do this.

You have two main ways to control Microsoft accounts:

• Local Security Policy Editor (easier method for managing your PC)
• Windows Registry Editor (advanced method for power users)

How to Enable or Disable Microsoft Accounts Using Local Security Policy

Local Security Policy lets you block Microsoft accounts on Windows 11 by changing system rules that stop users from signing in with online credentials. You can use this built-in Pro feature to completely disable Microsoft accounts on your PC, forcing everyone who uses the computer to sign in with a standard offline user profile instead.

Before you start, make sure you are signed in as an administrator. Also make sure the PC has at least one working local administrator account. If you choose the strictest option below and your only admin account is a Microsoft account, you could lock yourself out.

Steps:

1. Press Windows + R on your keyboard. The Run box opens.
2. Type secpol.msc and press Enter. Approve the User Account Control prompt if one appears. The Local Security Policy editor opens. If Windows says it cannot find the file, you are on Windows 11 Home and should use the Registry Editor method instead.
3. In the left pane, select Local Policies › Security Options The right pane fills with a long list of security policies.
4. Find and double-click "Accounts: Block Microsoft accounts". A properties window opens with a drop-down list on the Local Security Setting tab.
5. Open the drop-down list and choose one of these options:

   • Disabled: Microsoft accounts work normally.
   • Users can't add Microsoft accounts: People cannot add new Microsoft accounts.
   • Users can't add or log on with Microsoft accounts: No one can use Microsoft accounts on this PC.
6. Click OK to save your choice. The window closes and the policy list shows your new setting.

The change usually applies right away, but signing out or restarting the PC makes sure it takes effect everywhere. To undo it, open the same policy again and set it back to Disabled.

How to Allow or Block Microsoft Accounts Using the Registry Editor

Registry Editor lets you disable Microsoft accounts on Windows 11 by modifying system keys when the Local Security Policy tool is not available on your Home edition of the operating system. You can adjust these registry values to block Microsoft accounts and restrict how people sign in to your shared computer.

You need an administrator account for this. As with the policy method, keep a local administrator account available before you block sign-ins.

Steps:

1. Press Windows + R, type regedit, and press Enter. Approve the User Account Control prompt. The Registry Editor opens.
2. [ADMIN REQUIRED] Navigate to this location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System. You can expand the folders in the left pane, or paste the path into the address bar at the top of the window and press Enter. The key opens and its values appear in the right pane.
3. Look for a value named NoConnectedUser in the right pane.
4. If it is not there, right-click on a blank area of the right pane. Choose New › DWORD (32-bit) Value. Name it NoConnectedUser and press Enter. The new value appears in the list.
5. Double-click NoConnectedUser and set the Value data box to:

   • 1 – Block adding new Microsoft accounts.
   • 3 – Block adding and signing in with Microsoft accounts.
6. To allow Microsoft accounts again later, right-click the NoConnectedUser entry, choose Delete, and confirm by clicking Yes. Deleting the entry removes the restriction.
7. If you set a value in the earlier step, click OK in the edit window, then close the Registry Editor.

Sign out or restart your PC so Windows reads the new value. If you later need to reverse the change, delete NoConnectedUser as described above.

Please back up your PC before making any changes. Follow this guide if you want to learn how to safely back up your registry: How to Open the Registry in Windows 11.

Summary

Microsoft accounts connect you to Windows 11 services, and you can choose to allow or block them using simple tools.