Microsoft gave companies the opportunity to remove unnecessary requests when logging into enterprise Windows applications. After installing the July update, administrators will be able to automatically allow a single login on controlled computers.
The change came in Windows 11 versions 24H2 and 25H2 along with the monthly security update KB5101650 for July 2026. The new setting allows you to use the credentials entered when logging into Windows to access other applications and Microsoft services without additional confirmation windows.
Previously, Microsoft changed the order of entry in the European Economic Area. After authorization in Windows, the system no longer connects the user to other products of the company automatically, but asks to confirm separately that it uses the same accounts. This approach gives the user more control, but in the corporate environment forces you to perform additional actions when working with already customized and trusted services.
Now organizations can disable such requests through the system registry. To do this, the administrator needs to open the section HKLM\SOFTWARE\Policies\Microsoft\Windows\AAD and create a parameter AutoAcceptSsoPermission Type DWORD with value 1.
The configuration can be deployed through group policies, Microsoft Intune, Microsoft Configuration Manager, and other tools that allow you to manage devices and change the registry. The policy is valid only on corporate computers that the organization manages, and only for Microsoft Entra ID accounts.
Microsoft’s personal accounts will continue to show a confirmation request. Settings will also not affect home and other uncontrollable devices. To enable the feature, companies need to install a July update, apply a new policy, and check how a single login works on enterprise computers.
The change came in Windows 11 versions 24H2 and 25H2 along with the monthly security update KB5101650 for July 2026. The new setting allows you to use the credentials entered when logging into Windows to access other applications and Microsoft services without additional confirmation windows.
Previously, Microsoft changed the order of entry in the European Economic Area. After authorization in Windows, the system no longer connects the user to other products of the company automatically, but asks to confirm separately that it uses the same accounts. This approach gives the user more control, but in the corporate environment forces you to perform additional actions when working with already customized and trusted services.
Now organizations can disable such requests through the system registry. To do this, the administrator needs to open the section HKLM\SOFTWARE\Policies\Microsoft\Windows\AAD and create a parameter AutoAcceptSsoPermission Type DWORD with value 1.
The configuration can be deployed through group policies, Microsoft Intune, Microsoft Configuration Manager, and other tools that allow you to manage devices and change the registry. The policy is valid only on corporate computers that the organization manages, and only for Microsoft Entra ID accounts.
Microsoft’s personal accounts will continue to show a confirmation request. Settings will also not affect home and other uncontrollable devices. To enable the feature, companies need to install a July update, apply a new policy, and check how a single login works on enterprise computers.
