How can companies effectively manage their user's use of Windows 8.x Microsoft Accounts?
When I started the migration of our company to Office 365, I expected that the Office 365 ID/account would also be a Microsoft Account so that Windows 8.x user's Office 365 ID would automatically give them access to Metro Apps, the Microsoft Store (for updates and company approved purchases of Apps). Sadly this is not the case. Speaking to an Office 365 support representative they remarked as follows;
"The advantage is ... the core information for your organization (OneDrive and Email) is managed under Office 365 account.
The disadvantage is the Microsoft account is personal and out of control. However, Microsoft account is only associated with personal information."
The problem here is that the existence of a Microsoft Account means that every corporate Windows 8 computer now has the user's personal Microsoft Account associated with that device. Allowing the user to install applications, accidentally install Trojans, copy corporate data between OneDrive for Business to OneDrive (Microsoft Account), open the corporate network to what ever environment the user accesses, etc.
Outook Office 365 - Office 365 ID
Lync - Office 365 ID
OneDrive for Business - Office 365 ID
Skype - Microsoft account
Windows Store - Microsoft account
Windows 8.x login - Microsoft account
OneDrive - Microsoft account
Windows 8.x Mail App - Microsoft account (to activate, Office 365 account to view Office 365 email and Calendar ?)
Issues caused by Users associating their personal credit card or business credit card with their Microsoft Account. Issues of the company purchasing Metro Apps for the user but the user having a Personal Microsoft Account with a Personal Credit card ?
How can a small business manage a user’s Microsoft account.
How can a small business remove locally synced Office 365 OneDrive files and Outlook email ?
How do Enterprise organizations manage Windows 8.x and its need for Microsoft Accounts ?
If the company was to disable the use of Microsoft Accounts using the security policy "Accounts: Block Microsoft accounts" then does this cause a security risk as Metro Apps could not be updated (requires the Windows Store).
I am interested how to mitigate the above risks and how others are managing these issues. Please let me know if know of resolutions.