In Defense of Requiring a Windows 11 Online Account Sign-In ⭐

Microsoft has been pushing customers to sign into Windows with an online account for years. This sets enthusiasts on edge. But it’s the right choice for just about everyone. Including those who bristle at what they see as an affront to their sensibilities.

I mention this now because Microsoft has finally started implementing a long-feared and long-rumored change to Windows 11, starting with the Dev and Beta channel releases in the Windows Insider Program yesterday: It is “removing known mechanisms for creating a local account in the Windows Setup experience (OOBE).” To be clear, this means that:

When you set up Windows 11 interactively (perhaps having just purchased a computer or after using Reset This PC), the OOBE lets you sign-in using an online account, meaning a Microsoft account (MSA) or a so-called Microsoft Work or School account (Entra ID). But there are workarounds that enable you to sign in with a local account, as documented in the Overcome Windows 11 Setup Annoyances chapter in my book the Windows 11 Field Guide.

The changes in these Insider builds will soon be implemented in Windows 11 versions 24H2 and 25H2, the only supported versions of the system for individuals. So they will eventually become part of the Windows 11 disk images (ISOs) we download from Microsoft and the Windows 11 installation media.
The workarounds I document in the book will no longer work.
It’s not yet clear whether Rufus and other third-party tools will be able to bypass these changes and enable OOBE-based local account creation.
It doesn’t matter. (More on this point below.)

This change is the latest in a series of steps that Microsoft has taken over the years to better secure Windows and make it easier for customers to connect with OneDrive, Microsoft 365, the Microsoft Store, and its other online services. And yes, I know that those two things seem contradictory in some ways. But I think nuance is an important part of this discussion.

And it is a discussion we’ve been having for years even though it impacts almost no one in the real world. I cover local accounts in the book, of course, and thanks to the ongoing enshittification of Windows 11, I documented what you can and do to secure a local account effectively in Windows 11. This was mostly an experiment, in the sense that I will not sign into Windows with a local account and strongly recommend no one else does either.

And that’s the thing. This issue, such as it is, only impacts technical enthusiasts, and I mean that pretty much literally. There’s always someone with some bizarre reason why they’re the exception that disproves that assertion. Or they just don’t like Microsoft limiting their choices. Or whatever. Generally speaking, this is the right thing to do for just about everyone.

Looking at this from the perspective of the technical enthusiast that I, too, am, I feel like we have an unspoken contract with Microsoft. We respect that Microsoft makes design...