When you install Office 365 ProPlus, you may be presented with a screen which says “Use this account everywhere on your device”. This can be confusing for users.
This screen can be hidden by preventing Azure AD device registration via the registry:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin
"BlockAADWorkplaceJoin"=dword:00000001
This registry key takes effect immediately and does not require a reboot. You won’t see the screen again.
Users have 4 options:
If a device gets registered in Azure AD, an administrator can block access to that tenant if the device is lost. It does not allow remote wipe or management unless Intune MDM is also configured.