Deployment of Windows 8 and Microsoft account

Question

Hi,
I have a situation where I am deploying Windows 8.1 to desktops connected to a 2008 R2 domain
Scenario:
* Each client PC is running Windows 8.1
* Each client PC signs on to internal domain controller ([email protected])
* Each user account has an office 365 sign on which is syncronised with active directory (Microsoft organisational account)
It would now appear that each user requires a microsoft / live account to benefit from apps, windows store etc..
Does anyone know of a procedure where the organisational account for office 365 can be used for this (which i dont think is possible) or perhaps any way of bulk registering my office 365 users for a microsoft/live account and syncronise the passwords.
Anyone come across this issue before?
**Mods, if i have put this in the wrong category, please feel free to move it**
Thanks,
M
If you find my information useful, please rate it. :-)

Answer 1

Having similar issues/concerns to yourself, I have been researching for a solution. While I have not found any real solution, there are two work-arounds that I am contemplating. Please let me know if either of these could help yourself, or if you have found
better or improved solutions.
Process 1.
1) For each Office 365 account, also create a Microsoft Account
2) Computer Configuration\Administrative Templates\Windows Components\OneDrive\"Prevent the usage of OneDrive for file storage" to "Enabled", to ensure that the Microsoft Account's OneDrive is disabled so the user does not accidental store company data to the
Microsoft Account's OneDrive but only has access to the Office 365's OneDrive for business.
3) When a user leaves, delete their Office 365 account and then also delete their Microsoft Account (see http://windows.microsoft.com/en-us/windows-live/account-close-account). Remember to transfer any required company data from their Office 365 OneDrive account
to the corporate Team Sites before deleting their Office 365 account.
or
Process 2.
1) You can totally disable the use of Microsoft Accounts and the Windows Store, while still allowing users to make used of already installed Windows Store Apps.  
2) If you have a Windows AD server you can use side-loading to install apps. Or you could install the apps before disabling Windows Store.
3) You can still enable the automatic updating of Windows Store Apps, even when the Windows Store is disabled.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\"Accounts: Block Microsoft accounts" to "Users can't add or log on with Microsoft accounts"
Computer Configuration\Administrative Templates\System\Internet Communications Management\Internet Communications settings\"Turn off access to the Store" to "Disabled"
Computer Configuration\Administrative Templates\Windows Components\App runtime\"Allow Microsoft accounts to be optional" to "Enabled"  (NB: allows the use of Windows Store apps even when the use of a Microsoft Account is disabled)
Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off the Store application" to "Enabled"
Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off Automatic Download and Install of updates" to "Enabled"
Computer Configuration\Administrative Templates\Windows Components\Store\"Turn off Automatic Download of updates on Win8 machines" to "Enabled"
If you want to disable Syncing of data, see;
Computer Configuration\Administrative Templates\Windows Components\Sync your settings\"Do not sync passwords"
I am very interested to learn if there are more Group Policies that could be, or should be, used to manage Microsoft Accounts and the Windows Store.