Avatar of Jason Johanknecht
Jason Johanknecht
Flag for United States of America asked on

Office 365 and Work controlled computers

Office 365 and Work controlled computers.  Have a support call for a Non-Domain server, running Remote Desktop.  Server has no virtual OS either.  They bought new laptops and attempted to connect to their network during the holiday shutdown, but they hired IT students to do the work.  The students setup the computer as Company owned using a newly created Office 365 account with individual users.  I was not part of the Office 365 configuration, so I don't know many details.  They are having trouble mapping network drives because of the MS online account, and the 2019 Server doesn't use online accounts.  I have shown them connecting with different credentials for mapping the drives, but figure a better solution must exist.  The company owned setup changes several items in the administration of the laptop.  Can anyone give me the crash course on MS online accounts in Business?  I am old school and have avoided online accounts in the business environment.
Microsoft 365DesktopsRemote AccessMicrosoft Server OSWindows OS

Avatar of undefined
Last Comment
Jason Johanknecht

8/22/2022 - Mon
Adam Leinss

They need local accounts for each user and each user needs to be replicated with the same username/password on the server-side.  That said, Active Directory would be most helpful here.  They can login to Office 365 with an online account, but as you said, Server 2019 doesn't know anything about online accounts, so they need accounts setup on the server and each laptop.

Of course, I find it kind of weird they are trying to map network drives, usually that is done in a domain setting, not with some workgroup setup using Office 365.  If they are using Office 365, why are they mapping network drives?
Jason Johanknecht

ASKER
That is what I expected to do for non-domain, but the computers will not allow local accounts.  I can create them using Control UserPasswords2, but when I go to login... they are not accessible.  It will only allow online accounts.
Adam Leinss

Weird...I'm using a local account on Windows 10 Pro at home, are these Windows 10 Home?

There is a work-around:

If you’d prefer not to have a Microsoft account associated with your device, you can remove it. Finish going through Windows setup, then select the Start button and go to Settings > Accounts > Your info and select Sign in with a local account instead.

https://www.howtogeek.com/442609/confirmed-windows-10-setup-now-prevents-local-account-creation/
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
Jason Johanknecht

ASKER
That option doesn't exist either.  The person who setup the computers originally chose "My Organization" owned and logged into the Office 365 account, instead of "I own it".
Adam Leinss

Sorry, I have no experience with this type of setup where Windows is only using an online account to login.  Hopefully someone else on E-E can chime in on this one.
Scott Fell

Depending on what they are doing and the size of the office, using office365 for a small office does eliminate the need for a server.  Many times you can replace a full server with a network drive if that is even needed at all.

I have done what you have, "...shown them connecting with different credentials for mapping the drives...".  

One point of confusion for office365 that I run into is MS allows you to sign in as either an individual or work account. The same goes for OneDrive. You can have multiple OneDrive clients and that can get confusing. I know this is getting off topic for this thread, but you do want to make sure everybody is using the "For Work or School" version.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Jason Johanknecht

ASKER
The client doesn't use One Drive.  Server does provide file sharing as well as applications.  The server is a Remote desktop server, and no domain controller involoved.
Jackie Man

The fastest way to sort out your problem is to do a factory reset.

Afterward, do not connect to any network before you setup the computer and you can create local account just like what you did it for the setup for old school method.
Jason Johanknecht

ASKER
That is worst case scenario, and I hope to avoid that.  Any other thoughts?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Scott Fell

The client doesn't use One Drive
That is not really what I was getting at.  I was referring to one point of common confusion is logging into MS accounts by inadvertently choosing "Personal" at first log in instead of "Business/School" which is what you need.  Another potential point of confusion is the students created both a Microsoft account  for the local pc and an office365 account. Hopefully the office365 account is what is used.

I think I understand better what you are asking though. I just do not use RDP like this myself. But I believe what you are after is using Azure AD which should be included in the office365 account.
https://docs.microsoft.com/en-us/office365/enterprise/about-office-365-identity
https://docs.microsoft.com/en-us/windows/client-management/connect-to-remote-aadj-pc

It also looks like Azure AD is not supported with RDP https://answers.microsoft.com/en-us/windows/forum/all/office-365-account-for-remote-desktop-access/1fc7416a-de4e-4d81-81c4-98d80015db4c and therefore your solution you stated in your original question of creating user accounts on the server , "I have shown them connecting with different credentials" is most likely the option you will need to use.

Because you were not part of the original set up and there are different options that could have been used. it is worth a call into MS. Hop on the admin panel and choose support. You will get somebody to call you back in a very short time. They will do a screen share with you and walk you through the process. I lean on their help a lot. I don't have an easy way to test what you are doing myself or I would. The set up I  have used was what you already suggested.
Jason Johanknecht

ASKER
They selected "Buisness/School" instead of "Personal".  I do not use the Azure AD, because the RDP is a must.  They used the Office 365 account or accounts at that point... unsure which.  The Office 365 was only supposed to provide e-mail hosting and desktop versions of Office to the users.
ASKER CERTIFIED SOLUTION
Scott Fell

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Jason Johanknecht

ASKER
That is the problem.  The sign in with local accounts is not available via any normal means.  And the online account is not an option for the RDP server.  We use connect with different credentials to map network drives and that works.  Is it possible they used the admin account on all laptops, locking all other user accounts out of ability to add local accounts?
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Jason Johanknecht

ASKER
I am scheduled to be on site Thursday this week (Where the laptops exist).
Scott Fell

What I would do on Thursday is initiate a ticket within the Office365 portal. They call back in 1 to 20 minutes typically sooner than later. I have found great help from them and they can also do a screen share to help. At times they have uncovered things that were not easy to see.
Jason Johanknecht

ASKER
So I found how to disconnect the computer from the Azure services, and set a local admin account.  After restart, the computer works the way we expect, connect to Office 365 and the server!  One of the computers sadly has decided to no longer allow any logins, and a clean OS is in progress.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Jason Johanknecht

ASKER
Under Accounts > Work or School > Disconnect the Office 365 account from all devices.  Thanks especially to Scott for a lot of useful information.