Control how Office handles form-based sign-in prompts: registry value fbabehavior and 1 moreUserHKCU\software\policies\microsoft\office\16.0\common

Policy ID: L_AuthenticationFBABehavior
Scope: User Configuration
Supported on: At least Windows Server 2008 R2 or Windows 7
Source: Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
Category: Microsoft Office 2016 › Security Settings

Registry

fbabehavior

REG_DWORDUser

HKCU\software\policies\microsoft\office\16.0\common Current key

Enabled value: Depends on the option value
Element: Behavior:

Options
Item	Stored value
Block all prompts	1
Ask the user what to do for each new host	2
Show prompts only from allowed hosts	3

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common]

; Options (use only one)
; Block all prompts
"fbabehavior"=dword:00000001
; Ask the user what to do for each new host
"fbabehavior"=dword:00000002
; Show prompts only from allowed hosts
"fbabehavior"=dword:00000003

CMD

:: Options (use only one)

:: Block all prompts
reg add "HKCU\software\policies\microsoft\office\16.0\common" /v "fbabehavior" /t REG_DWORD /d 1 /f
:: Ask the user what to do for each new host
reg add "HKCU\software\policies\microsoft\office\16.0\common" /v "fbabehavior" /t REG_DWORD /d 2 /f
:: Show prompts only from allowed hosts
reg add "HKCU\software\policies\microsoft\office\16.0\common" /v "fbabehavior" /t REG_DWORD /d 3 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Force | Out-Null

# Options (use only one)
# Block all prompts
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Name 'fbabehavior' -PropertyType DWord -Value 1 -Force | Out-Null
# Ask the user what to do for each new host
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Name 'fbabehavior' -PropertyType DWord -Value 2 -Force | Out-Null
# Show prompts only from allowed hosts
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Name 'fbabehavior' -PropertyType DWord -Value 3 -Force | Out-Null

fbaenabledhosts

REG_EXPAND_SZUser

HKCU\software\policies\microsoft\office\16.0\common Current key

Enabled value: Depends on the option value
Element: Specify hosts allowed to show form-based sign-in prompts to users:
Value type: REG_EXPAND_SZ
Required: false
Expandable string (REG_EXPAND_SZ): true

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
; hex(2) and hex(7) data must be written as hexadecimal (UTF-16LE)
"fbaenabledhosts"=hex(2):<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKCU\software\policies\microsoft\office\16.0\common" /v "fbaenabledhosts" /t REG_EXPAND_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Force | Out-Null
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common' -Name 'fbaenabledhosts' -PropertyType ExpandString -Value '<enter value>' -Force | Out-Null