{"id":10954,"date":"2018-07-12T16:22:10","date_gmt":"2018-07-12T16:22:10","guid":{"rendered":"https:\/\/www.itwriting.com\/blog\/?p=10954"},"modified":"2018-07-12T16:32:39","modified_gmt":"2018-07-12T16:32:39","slug":"account-options-when-setting-up-windows-10-and-microsofts-enforced-insecurity-questions","status":"publish","type":"post","link":"https:\/\/www.itwriting.com\/blog\/10954-account-options-when-setting-up-windows-10-and-microsofts-enforced-insecurity-questions.html","title":{"rendered":"Account options when setting up Windows 10, and Microsoft&rsquo;s enforced insecurity questions"},"content":{"rendered":"<p>How do you sign into Windows 10? There are now four options. I ran through a Windows 10 setup using build 1803 (which was released in April this year) and noted how this has evolved. Your first decision: is this a personal or organisational PC?<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-14.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"426\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-14.png\" border=\"0\"><\/a><\/p>\n<p>If you choose Setup for an organisation, you will be prompted to sign into Office 365, also known as Azure AD. The traditional Domain join, for on-premises Active Directory, has been shunted to a less visible option (the red encircling is mine). In larger organisations, this tends to be automated anyway.<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-15.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-15.png\" border=\"0\"><\/a><\/p>\n<p>But this one is personal. It is a similar story. You are prompted to sign in with a Microsoft account, but there is another option, called an Offline account (again, the red circle is mine). <\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-16.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-16.png\" border=\"0\"><\/a><\/p>\n<p>This \u201cOffline account\u201d was in Windows 7 and earlier the only option for personal accounts. I still recommend having an administrative \u201coffline account\u201d set up so you can always be sure of being able to log into your PC, even without internet. Think about some of the scenarios. Someone might hack your Microsoft account, change your password, and now you cannot even log onto your PC. Unless you have an offline account.<\/p>\n<p>I\u2019ve been awkward and selected Offline account. Windows, or rather Microsoft, does not like it. Note the mind games in the screenshot below. Although I\u2019ve made a positive selection for Offline account, the default and highlighted option now is to change my mind. I do not like this.<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-17.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-17.png\" border=\"0\"><\/a><\/p>\n<p>Now I can set up my offline account. A screen prompts for a username, then for a password, all the time nagging that I should create an online account instead.<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-18.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-18.png\" border=\"0\"><\/a><\/p>\n<p>I type and confirm the password; but now I get this:<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-19.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-19.png\" border=\"0\"><\/a><\/p>\n<p>Yes, I have to create \u201csecurity questions\u201d, with no option to skip. If you try to skip, you get a \u201cThis field is required\u201d message. Worse still, they are from a pre-selected list:<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-20.png\"><img loading=\"lazy\" decoding=\"async\" width=\"506\" height=\"231\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-20.png\" border=\"0\"><\/a><\/p>\n<p>I really hate this. These are not security questions; they are insecurity questions. Their purpose is to let me (or someone else) reset the password, forming a kind of back door into the PC. The information in the questions is semi-secret; not impossible for someone determined to discover. So Microsoft is insisting that I make my account less secure.<\/p>\n<p>Of course you do not have to give honest answers. You can call your first pet yasdfWsd9gAg!!hea. But most people will be honest.<\/p>\n<p>Does it matter, given that a PC account offers rather illusory security anyway? Unless you encrypt the hard drive, someone who steals the PC can reset the password by booting into Linux, or take out the disk and read it from another PC. All true; but note that Microsoft makes it rather easy to encrypt your PC with Bitlocker, in which case the security is not so illusory.<\/p>\n<p>Just for completeness, here is what comes next, an ad for Cortana:<\/p>\n<p><a href=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image-21.png\"><img loading=\"lazy\" decoding=\"async\" width=\"604\" height=\"454\" title=\"image\" style=\"display: inline; background-image: none;\" alt=\"image\" src=\"https:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2018\/07\/image_thumb-21.png\" border=\"0\"><\/a><\/p>\n<p>Hey Cortana! How do I delete my security answers?<\/p>\n<p>I do get why Microsoft is doing this. An online account is better in that settings can roam, you can use the Store, and you can reset the password from one PC to restore access to another. The insecurity questions could be a life-saver for someone who forgot their password and need to get back into their PC.<\/p>\n<p>But such things should be optional. There is nothing odd about wanting an offline account.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How do you sign into Windows 10? There are now four options. I ran through a Windows 10 setup using build 1803 (which was released in April this year) and noted how this has evolved. Your first decision: is this a personal or organisational PC? If you choose Setup for an organisation, you will be &hellip; <a href=\"https:\/\/www.itwriting.com\/blog\/10954-account-options-when-setting-up-windows-10-and-microsofts-enforced-insecurity-questions.html\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Account options when setting up Windows 10, and Microsoft&rsquo;s enforced insecurity questions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55,75,1519,97],"tags":[586,810,997],"class_list":["post-10954","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-security","category-tech","category-windows","tag-microsoft","tag-security","tag-windows-10"],"_links":{"self":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/10954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/comments?post=10954"}],"version-history":[{"count":2,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/10954\/revisions"}],"predecessor-version":[{"id":10956,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/10954\/revisions\/10956"}],"wp:attachment":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/media?parent=10954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/categories?post=10954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/tags?post=10954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}