Each owner of a licensed version of the popular Windows operating system from the Microsoft software developer, in order to gain access to all resources provided by the company, as well as to download new updates, is required to create his own personal account.

This is necessary in order to certify to Microsoft that you are a real person and do not intend to violate their copyright. However, due to the large number of modern Internet services such as social networks, payment systems, email and many others that require your accounts with a unique login and password, a situation may occur that you forget your password for your Microsoft account, without which you You simply cannot update the current version of Windows to version ten. Don't despair, not everything is so hopeless. As it may seem at first glance. All you need to do is read this article to the end and follow all our recommendations, and you can easily restore access to your account from the Microsoft Internet service.

Microsoft account: what is it and why is it needed?

As all users know, an account is personal account to access any Internet resource or online service. Thus, in general terms, a Microsoft account is a similar personal account on the company’s official website.

To create your account, you must go through the registration procedure on the Microsoft website and fill out your personal information. Which includes full name, gender, date of birth, occupation, contact information, residential address and some other data. The main problem that arises when you lose access to personal account, is that Microsoft services constantly monitor the location of the computer on which the licensed OS is installed and from which an attempt is made to update the system to the tenth version.

It is worth noting that the situation can be greatly simplified by opening up the possibility external access To account from any other computer, however, in this case the user faces many problems.

Basic ways to access your account

To clearly demonstrate the simplest and most common ways to access a Microsoft account, let's look at a standard situation that most users encounter. Let's assume that Windows 8 is installed on your computer and you want to update it to the tenth version. To do this, you need to log in to your account. However, what if you forgot your password?

The first thing to do is calm down. Next, you should pay attention to a copy of the operating system. When you try to log into your Microsoft personal account, the user login is registered automatically based on the location of the PC, determined by its IP address. In this case, it is much easier to recover the password if it was generated by the system and saved in special file to a hard drive or flash drive. However, everything is much more complicated if you set the password yourself.

However, Windows provides many ways to regain access to your Microsoft account, even without connecting your computer to the network. This is due to the fact that the OS continuously monitors a person’s location data, the most frequently visited Internet sites, as well as the programs used. Based on this data, when trying to log in to your personal account on the official website Microsoft Corporation, a report on user activity is created and sent to the system for processing. This was created with the aim of increasing the level of protection of personal data from theft by attackers.

Therefore, before you begin the password recovery procedure, you need to understand what algorithm the authorization system uses.

Registering an account and filling out personal data

It is best to consider the procedure for creating a Microsoft account and filling out personal data using the example of the Windows operating system, version ten. This assembly is best suited because during its installation all system errors and bugs appear, and authorization and account data disappear.

The OS security system settings are implemented in such a way that, in order to improve protection, only passwords with an increased level of complexity are supported to eliminate the possibility of hacking the user account. Thus, you will not be able to change the password for logging into your Microsoft account even if you have administrator rights. At Windows update up to the tenth version, operating system automatically generates an account and assigns it a personal login and password, which are necessary to log into your personal account.

If necessary, you can disable the need to enter a password in the security settings; however, to do this, you must first log in to the Microsoft website using your account. In addition, sometimes the user will need to confirm access rights when downloading files or when launching certain utilities. Such checks will occur even when working under an administrator account, which causes certain inconvenience.

It is beneficial for every company that their customers contact support for help as often as possible. This allows corporations to maintain their rating, as well as to be constantly in touch with their customers and constantly improve the quality of service.

This trend is also observed in the case of the global software manufacturer Microsoft software. To help users in case of problematic situations, Windows has integrated “Help Desk”, which helps users if they have any problems. If the answer is not found, the user can create a request, however, when creating it, personal data will be required. Includes the residential address and telephone number that was provided when creating your account. To this number automatic system sends a special code necessary to confirm ownership of the device.

Thus, if you have a work phone number linked to your personal account and have access to your mailbox, you can request the procedure for changing your Microsoft account password on the company’s official website. After creating a request, you will receive an email email, which will contain a link that takes the user to the password change page. After this, you need to set and confirm a new password, and you will be able to use your account again without any problems.

It is worth noting that password recovery is nothing compared to the procedure for deleting your account.

Recovering your Microsoft account password on a mobile device

In everyday life, cases of loss of access to your Microsoft account on mobile gadgets running Windows OS occur as often as in the case of desktop systems.

How to sign in to Windows 10

The local account will be replaced with a Microsoft account. The next time you sign in to Windows, enter your Microsoft account name and password. This will not affect applications or files.

Applies to: Excel 2016 Word 2016 Outlook 2016 PowerPoint 2016 OneNote 2016 Publisher 2016 Access 2016 Visio professional 2016 Visio standard 2016 Project professional 2016 Office 2016 Excel 2013 Word 2013 Outlook 2013 PowerPoint 2013 OneNote 2013 Access 2013 Visio 2013 Office for Business Office 365 Admins Office 365 Small Business Office for home Office 365 Small Business - Admins Excel 2016 for Mac Outlook 2016 for Mac PowerPoint 2016 for Mac Word 2016 for Mac OneNote 2016 for Mac Office 2016 for Mac Office 365 provided by 21Vianet Office 365 Small Business Office 365 service provided by 21Vianet - for administrators Office 2013 Project professional 2013 Project standard 2013 Visio professional 2013 Project for Office 365 Publisher 2013 for Developers Project standard 2016 Office 365 activation Office 365 Germany Enterprise Office 365 Germany Enterprise for Admins Visio Pro for Office 365 Less

Options for recovering the account and password you use to sign in and install or reinstall Office, or manage your Office 365 subscription, depend on the plan with which your product is included: Office for home or Office for business.

Don't know what your product is?

Office for home

Office 365 subscriptions

Office 365 Home
Office 365 Personal
Office 365 for Students

Office 2016 and Office 2013 suites available for one-time purchase, which include fully installable Office applications.

Office for home and study
Office for home and business
Office professional
Office Professional Plus*

• Tutorial

It's always difficult to start somewhere. After much thought, I decided to devote my first article on Habré to the topic that I deal with in this moment- Office 365 in all its forms.

There were already several articles on the site describing certain components of this service. We also wrote about setting up authorization using ADFS and synchronizing with Active Directory, but in addition to practice, a little theory wouldn’t hurt. Of course, it’s impossible to tell everything, and it’s not interesting, but in my opinion, important points are worth noting.

From my own experience, I can say that authentication in Office 365 is a rather complex topic, the apparent simplicity and obviousness of which often hides subtle nuances, the knowledge of which allows you to better deploy the system and reduce the time required to localize the problem. These are the nuances I would like to talk about today.

In Office 365, there are three types of identities used to authenticate your users across Exchange Online, Sharepoint Online, Lync Online, and even Office Pro Plus.

1. Microsoft Online ID is a regular account in Windows Azure Active Directory. This is an analogue of the familiar Active Directory to all of us, but adapted to work with “cloud” Microsoft products(for example, in addition to Office 365, it is also used for MS Dynamics CRM Online). Users are created manually using the admin portal or in bulk via a CSV file.
2. Microsoft Online ID + DirSync - the same “cloud” users, but are a copy of accounts from your AD, created using Microsoft utilities Directory Synchronization or DirSync for short. Almost all basic attributes are transferred from local AD, but user passwords are not transferred. User management is done partly through AD and partly through the portal.
3. Federated ID + DirSync - the system is based on the same principle of copying accounts from your AD, with the only difference being that Active Directory Federation Service 2.0 is used for authorization. Users are managed through local AD.

Comparison of identifier types

Microsoft Online ID	Microsoft Online ID + DirSync	Federated ID + DirSync
Audience Small organizations without on-premises Active Directory	Audience Medium-sized organizations with on-premises Active Directory	Audience Large organizations with on-premises Active Directory
"Behind" Not required local servers	"Behind" Local user and group management Coexistence Scenarios	"Behind" Single sign-on topology with corporate credentials Local identity management Password policy is controlled locally Two-factor authentication possible Coexistence Scenarios
"Against" Identity management from the cloud	"Against" Single sign-on topology not possible Two-factor authentication is not possible Two sets of details with different password policies Server deployment required	"Against" It is necessary to deploy a server with high degree accessibility

In practice, most often the third option is chosen because This allows you to achieve account consistency and simplify user management while maintaining full control over access rights and password policies.

If with the first two options, in technical terms, everything is quite obvious, then when implementing authentication using ADFS, difficulties arise.

Before I talk about the authentication mechanism, I’ll give a real life situation: a company with 1000+ users used Office 365 with authentication via ADFS. One not-so-great morning, users began to complain that their Outlook could not connect to their mail, but they still had access to Outlook Web Access, SharePoint or Lync. The cause of the failure was a change in server policies and, as a result, the ADFS Proxy service crashed. Several hours were spent locating this problem, which could have been saved by understanding a few simple things about authentication in Office 365.

So, Office 365 uses two main authentication mechanisms (sometimes called profiles):

Passive mechanism- used for authorization in Office 365 services using a browser or single sign-on service.
The operating principle of this mechanism can be illustrated by the following diagram:

1. The user, using a browser or Lync client, requests information from the SharePoint Online service, Exchange OWA or Lync server and receives a response asking him to log in to the Authentication Platform.
2. After receiving the request, the Authentication Platform determines that a federated identifier is being used and requires you to provide a User Source Id confirming the user’s validity in the local Active Directory), for which it redirects the request to the ADFS server URL.
3. The ADFS server authenticates the user in local AD and issues him a signed User Source ID
4. Armed with a kind of “passport,” the user once again turns to the Authentication Platform, from which this time he receives a “cloud identity” NET ID.
5. This identity is subsequently used to work with services.

Active mechanism- used for authorization in the service Email using Outlook or using ActiveSync, IMAP, POP3 protocols.
The scheme is very similar to the previous version:


The principle of operation of this authorization mechanism repeats all the steps, with the exception of one important detail - the user sends his credentials to the Exchange Online service in explicit form (naturally protected by HTTPS protocol). Exchange Online, using the personalization mechanism, goes through all further stages on behalf of the user, including communicating with the ADFS server and obtaining the User Source ID.

Therefore, it is possible to define several key points The ones worth paying attention to are DNS, certificates, publishing, and fault tolerance.

DNS
If problems arise, you must always remember which DNS server the user is currently using when authorizing a specific service.

Certificates
If all your users are in corporate network and use only a browser and Lync client to work with Office 365, then you can forget about this point and feel free to use the self-signed certificate of your CA. But once you have external users or want to configure your favorite phone to receive corporate mail, you will need a valid certificate issued by a trusted certification authority. As a best practice, even at the stage of transition to Office 365, you should immediately plan to purchase, if not a wildcard, then at least a regular one with a pair of SANs, without hoping that you have a unique situation and external users will never appear.

fault tolerance
It seems that the most obvious thing in any IT system, in practice, turns out to be the most painful. Ensuring ADFS server resiliency is a critical and often overlooked step when setting up federated authentication. Increasing the reliability of ADFS is quite a simple task, which consists in using either a third-party NLB or a standard Windows Load Balancer (WNLNB). I understand that I’m talking about obvious things, but, unfortunately, many administrators do not pay attention to the topic of fault tolerance, trying to “someday later” deliver another server. Without going into too much detail, in practice, lack of ADFS balancing is the most common cause of problems with Office 365.

Publication
Once Outlook or ActiveSync becomes part of your Office 365 use case, the question becomes how to properly publish ADFS to the outside world. There are several possibilities for this:

• Exposing the ADFS server outside is the worst and most unsafe option, used by administrators not out of luck.
• Deploy ADFS Proxy - you will need two additional servers and load balancing between them (again using a third-party NLB or WNLB). Among the advantages, it is worth noting the ease of setup and administration. There is almost nothing to break there.
• Publishing through Forefront TMG/UAG is more difficult to configure and support, but much more functional. Allows you to expand the functionality of ADFS for external users and implement more complex Office 365 authorization scenarios. Some administrators manage to use TMG publishing and ADFS Proxy, which, in principle, is possible, but is fraught with many complexities and instabilities that are difficult to localize.
• External Reverse Proxy - can be any solution/device that does not modify SAML requests/responses, such as Citrix NetScaler or even a simple stunnel. Requirements for reverse proxy can be found here

Hello, dear readers of my blog. A few days ago I came across some very interesting material. In it I found about how to quickly install Windows 10 without an account and why you need a Microsoft account. In addition, I have some very interesting information about the clear advantages and disadvantages of upgrading to the tenth Windows versions using a local OS profile. I will try to give answers to all these and other questions by comparing two accounts that differ in access.

This is a collection of all online products produced by companies that are united under a common name. In cases where you are registered in programs such as Windows Live, Outlook and other similar ones, you are very lucky. You can easily activate it using your previously created profile (and user password).

It is worth noting that, unlike the local one, Microsoft does not use a login to log in, but your email address. In this case, the use of a fairly wide range of sites is permitted: Gmail, Mail, Yahoo, Live and Hotmail.

Such an account is equipped with a two-step user identification system. If you are signing in to your account using a new or unverified device, you may be required to enter a special security code.

Benefits of installing a Microsoft entry

1. Free, fast, convenient use and recovery of the applications that matter most to you through Windows Store. If you are the owner of any device on which the tenth version of Windows is installed, then you will be able to use all the best unique applications. Another obvious plus is that by purchasing an application from one device, it will automatically become available on your other tablet, laptop, smartphone and other similar devices.
2. Allows you to avoid problems with setting up the configurations of all your personal computers (the system can carry out fully automated synchronization of settings between PCs). Using this function, you can synchronize: themes, Internet browser settings, logins and passwords for sites.

Local account

Many users have noticed that using Windows 8, local accounting greatly limits the user's actions. Using it, you have access to a minimum number of functions and capabilities of the operating system. In the new version of Windows, all the most severe restrictions have been completely removed, and the local status has been raised (now it is compared with Windows 7).

This local account allows you to work with such office programs like: Mail, People, Calendar and others. In addition, the above standard email clients will allow the PC user to select any Gmail profile. These innovations are great news not only for owners of one PC, for whom the parameter synchronization function is not needed, but also for those people who actively use software from the Store.

If we take into account the fairly extensive changes from Microsoft, we can make a bold conclusion - the corporation has managed to recreate an excellent balance between the two types of accounts.

How to install Windows 10 with a local account

It's no secret that during the installation process of Windows 10 OS, the installer requires you to link your personal computer to a Microsoft profile. In cases where a person does not need to synchronize user data between various devices, you can do without creating such a profile or online account. To disable the creation of such an account, you need to follow similar instructions:

In the “Sign in to your Microsoft account” tab, find the “Create a new account” option and click the “Next” button.

In the window that appears, at the very bottom of the page, find the option “Sign in without a Microsoft account” and click “Next”.

Wait for a special dialog box to appear on your computer screen, which is designed to create a local profile of your operating system.

Create a username and password to log in, click “Next”.

How to delete an old entry and switch to a new one

How to sign in to Windows 10

The local account will be replaced with a Microsoft account. The next time you sign in to Windows, enter your Microsoft account name and password. This will not affect applications or files.

If you use an email address and password to sign in to Microsoft services such as Hotmail, Outlook, Messenger or Xbox Live, then you already have a Microsoft account and can use it to sign in to any service and any Xbox console.

If you don't have a Microsoft account, you can create one by going to the Create an account page and following the instructions there. You can enter any email address that you use regularly, or we will help you create a new email address @outlook.com.

How do I sign in to my new Xbox console or Xbox app?

What should I do if there is an error while logging in?

• If you know your Microsoft account sign-in information but can't sign in, make sure there are no Xbox Live service status warnings.
• If there are no current warnings, look in the list possible errors Learn about common Microsoft account sign-in errors. If the error you receive is not listed above, use the error code/status code lookup tool to find more information about the error code.
• If none of the solutions resolve your issue, contact Xbox Support.

How do I change, recover or delete my login password?

Change password

You should change your password from time to time to maintain the security of your account. For help, see the section.

Recover your password if you forgot it

If you don't know email address or your Microsoft account password, see Resolving a lost password problem.

Remove your password from all consoles where it was saved

• Instructions on how to remove your saved password from your home console.
• To remove a password remotely.
  • For Xbox One you can simply change your password.
  • For Xbox 360, you can change or delete an account from another Xbox consoles 360 where it was saved, managing the login options.

About using a password to manage your console login options

1. Open your browser, place the cursor in the address bar and enter: portal.office.com or follow the link.

2. On the page that opens, in the first field, enter your login (login from the corporate system, example: [email protected]).

3. After entering your login, the design will change. Enter your password in the second field and click the button: To come in(if necessary, log in again without entering your username and password, check the box next to the item: Remain in the system).

4. After entering the password and clicking the “Login” button, the initial page of the corporate space will open

Working with mail

1. To work with mail, log in corporate system and click on the “Mail” icon:

1.1 When logging in for the first time, you may need to set the language and time zone

1.2 After selecting the Language and time zone, you must click “Save”

2.1 To view incoming letters, you must select the appropriate item in the left column - “Inbox”

2.2 To write a new letter, click on the “Create” button at the top

Note! If you click on the arrow next to “Create”, a drop-down menu will appear where you can not only create a message, but also create a group and an event in the calendar;

3. After clicking on the “Create” button, a form for creating a letter will open on the right

3.1 Clicking the "To" button can search for contacts

3.2 To format text, use the toolbar under the message input field

3.3 To attach a file to a letter, click on the button with the image of a paper clip and select what you want to add or simply drag the file into the message input field.

4. To reply to a received letter: you need to select from the list of incoming letters the letter you want to reply to, click on it once with the left mouse button. A list of possible actions with the letter will appear at the top of the screen. When you click the arrow next to “Reply all”, a drop-down list will appear: “Reply”, “Reply all”, “Forward”;

Please note: You have the opportunity free installation Microsoft Office on Personal Computer as part of the corporate subscription of the State Budgetary Institution GPPC DOGM. Installation can be done directly from the system. Office can be installed on up to 5 devices, including home PCs.

Setting up mail on a smartphone

Set up Office 365 email in Outlook for Android

1.Open Outlook for Android on your device. Select Settings > Add Account >

2.On the Add an Account page, enter your email address and click Continue.

3.In most cases, Outlook automatically finds your email provider and sets up your account. If you're prompted to select an account type, select Office 365 from the icons displayed.

4.Enter your password and log in to connect to your account. You may also be prompted to enter a name and description for your account.

External reference .

NOTE: If you set up email using IMAP or POP, your calendar won't sync.

Outlook for Android may request access to certain information, such as contacts and calendar. Click Yes or Allow to grant these permissions. Your organization has security policies configured, click Activate.

You are now ready to use Outlook for Android!

Setting up Office 365 email in Outlook for iPhone

With Outlook for iOS, you can send and receive email, view and manage your calendar, and more. If you have an iPhone, iPad, or iPod Touch operating room installed iOS system 8.0 or later, you can configure the Outlook for iOS app on it.

Adding an email address

1.Open Outlook for iOS.

2.Select Settings > Add Account > Add Email Account.

3.Enter your email address (for example [email protected]) and click "Add Account".

4.If you are prompted to select an email service provider, select it from the list shown.

5.If you are prompted for additional information, such as server information, you must enter POP and IMAP settings for Office 365 -