Registry keys to administer Office 365 in your Organization

Posted on 5/4/2013 @ 12:46 PM in #SharePoint by | Feedback | 14265 views

If a user in your organization attempts to access an Office 365 resource, from their office client, you as an administrator have a lot of control on the user experience. This is tweaked mostly using certain registry keys as follows,

1.  HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\SignIn\SignInOptions  allows you to tweak what ID types to offer the user at logon,

SignInOptions value Description


Default - displays both the user's Microsoft account ID and the organization ID.


This only displays their Microsoft account ID.


This only displays their organization ID.


Does not display either ID type. The user will be unable to log on. If you set SignInOptions to 3, and a user triggers the logon page, no ID types will be offered to the user. Instead, the message “Sign in has been disabled” is displayed.


2. HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Internet\UseOnlineContent .. to prevent a user from connecting Office 2013 files that reside on the internet.

UseOnlineContent value Description


Do not allow user to access Office 2013 resources on the Internet.


Allow user to opt in to access of Office 2013 resources on the Internet.


Default - Allows the user to access Office 2013 resources on the Internet.


3. HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Identity\Identities .. is where it stores saved Office profile and credentials.

When a user logs into an Office app by using either their Microsoft account ID or their organization ID, a matching Office profile and credentials for that identity are created in the registry. Even though the logon page gives the user the option of removing that identity (under the “Not user name?” question). removing the identity still leaves that corresponding Office profile and credentials in cache for a while. This may be an issue if you want to remove the identity immediately (say someone got fired etc.). To do so, you can browse to that user's Office profile in the registry, and delete it.

Sound off but keep it civil:

Older comments..