How to attach a Microsoft account to a domain account?

Question

Microsoft

Domain controller on WinServer 2012 R2. On a Windows 10 Fall Creators Update computer. It turns out to add a Microsoft account, but the system does not offer to confirm it, which is why various settings are not synchronized. As far as I remember, this problem does not occur if you install earlier builds of Windows, but this is not an option for me. I went through group policies and local - nothing helped.
For example here: Computer Configuration\Administrative Templates\Windows Components\Microsoft account there is only one setting "Block authentication...". Disabled it even though it is disabled by default. I did this in the local policy on the computer itself, because there is no such policy in WinServer 2012 R2 yet.
On the server itself, the policy is as follows:

None of this helped. How to be?

Answer 1

The last time I studied the issue of synchronization in the domain, I found this
https://social.technet.microsoft.com/Forums/en-US/...
They did it on purpose, back in 1703 ... people are dissatisfied, but ...
You can apparently by transferring registry keys https://241931348f64b1d1.wordpress.com/2017/09/05/...
PS: latest admx https://www.microsoft.com/en-us/download/details.a... maybe something added in this area