Forum Discussion
prevent storing O365 account credentials in W10
When a user opens a Document, he gets the option offered to store the credentials in W10 (to be created under 'settings-accounts-access work or school'). I have attached the userinput request window as attachement (sorry, in Dutch, but the window is recognisable).
We have found that inspite of using MFA for loggin in to the portal, accepting this offer releases the user from ever being asked for a MFA again when opening local APPS like Word and accessing Sharepoint based documents.
Is there a way to prevent the user from being asked to store the credentials in W10 from Office365? I do not have any management access to the users device.
That's not "credential storing", but the new Web Account Manager feature. It actually is considered as form of MFA, thus you don't see any consequent prompts. Read here for more info: https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-primary-refresh-token
