MC466201 – Updated December 27, 2022: Microsoft is providing additional guidance for your information:
Microsoft now offers the ability to link an Azure Active Directory (AAD) work account and a personal Microsoft account (MSA). With this change, AAD users with a linked MSA account can now earn Microsoft Rewards points for Microsoft Bing searches done in their browser or Windows search box while signed in with their AAD account. This expanded Rewards eligibility was made based on user feedback.
The ability to link accounts will be enabled by default so account linking is available to an organization’s employees, but still requires employees to opt-in. The choice to link accounts is in an employee’s hands, and they need to take action to connect their AAD and MSA accounts.
Account linking will not change any group policies. Personal and work searches will not be linked, and there is no change to how searches are stored. Microsoft’s principles for data security and privacy in the enterprise still hold, which ensures that confidential organizational information including search history will not be collected on AAD accounts even after accounts are linked. Microsoft will not collect any new data for targeted advertising as a result of this change.
When will this happen
How this will affect your organization
For enterprises with account linking enabled, employees with an AAD and MSA account can opt into account linking through entry points such as Microsoft Edge and Microsoft Bing.
When account linking is enabled, employees won’t need to switch between their MSA and AAD accounts to earn Microsoft Rewards, which helps with employee productivity by keeping employees signed in with their AAD account. Employees with a personal Microsoft account will earn rewards for searches that they’re already doing while signed into their AAD, and these points can be redeemed for rewards, including donations to nonprofits.
What you need to do to prepare
You can turn off the account linking default using the PowerShell script below, which needs to be run by December 11. After December 11, you can turn off account linking in the Microsoft 365 Admin Center.
Disable account linking for your tenant using the following steps:
Set-ExecutionPolicy unrestricted
Employees can enable or disable account linking from Profile preferences in Edge Settings, the Microsoft Start Management Experience, and Bing Identity Control.
More information:
Previous Microsoft 365 Apps Changelog Messages
Whether it’s Security or Cloud Computing, we have the know-how for you. Sign up for our newsletters here.