Son found a way to bypass Xbox screen time restrictions. Need a fix

I can confirm that as of the date of this post the issue persists!

My son does exactly the same.

I'm an IT engineer and here are my observatins and thoughts:

1. Xbox One doesn't have an in-built power source (aka battery or accum) like the one you can find on a typical PC motherboard. It is usually intended to provide a long-lasting power source to keep the CMOS settings (e.g. system time). That is why when the console is unplagged from power for some time it losts some settings like time, etc. I assume it losts family account settings like limit too.
2. Once the console is plugged back and turned on it tries to connect to wifi and update various settings including time, and family account settings. (In case if they had been changed while the console was off/offline).
3. If the connection is not available at this moment (e.g. it had been purposely disconnected before the console was turned off) it probably keeps trying a few more times or some limited time (like 5 minutes mentined above) but after that it stops trying and NEVER tries again. So if the settings including the limites have not been provided/updated during the start process they won't be requested again after even if wifi connection is restored and available.

Microsoft, this is a MASSIVE issue that must be fixed!

The information about such loopholes gets spread across by teendage folks REALLY quickly - go on YouTube and check. It devaluates the whole idea of family accounts and control!

My son has been bypassing the screen time as well as the allowed time - he said by simply apearing offline. Very broken unless hes lying about that too. Which is very much a possibility as well - darn kids.

Thanks for the post!

Confiscating the controllers from now on... Or perhaps factory-reset and drop off at Goodwill...

I just checked myself to see if he can sign in to his account while the xbox is offline and he can still do it. He may not be able to play online anylonger ( i didn’t check that part) while his screen time is expired but he can still get on his xbox and play offline games. I would suggest this is not solved yet. Ive resorted adding a passkey to his account ( a button combination) so that i have to log him in to the actual xbox. I also removed the ability to add other accounts and fully restricted guest access. 

Yea he can remove the passkey with his account password but he cant add the passkey back so he will have to own up to his actions when he asks to play and the passkey is gone or the passkey is changed. 

Edit:

Here are some resources to help

Guest access, when no accounts are logged in. Set the restriction to the most restrictive setting:

https://support.xbox.com/en-US/my-account/security/restrict-content-access-when-noone-signed-in

Create a passkey on your child's account:

https://support.xbox.com/en-US/my-account/security/create-xbox-one-passkey

If you go into settings, you can select System settings. In there you can select Control Offline Content (or Signed-out content restrictions). In that setting you can uncheck Allow New Profiles and also set the age level for access (to the most restrictive) when no one is signed in and create PassKey to prevent changing those settings. That will control what can be done when no one is signed in and also prevent creating a new profile without the passkey.

Hope this helps someone.