The FTC has determined that Microsoft made deceptive promises regarding its Passport Internet service, the Associated Press reports. Under a settlement reached Thursday, Microsoft has agreed to tighten security of the service — a cornerstone of its .Net strategy — and endure 20 years of U.S. government oversight into how it operates such a system. Microsoft also agreed not to make future misrepresentations as to the information it collects from users, as well adhering to applicable laws in each country that Passport is used. Privacy groups have complained that Passport represented unfair and deceptive trade practices, making it difficult for Windows users to avoid signing up the service or cancelling it later. Last November, Microsoft acknowledged that a flaw in Passport’s security could have allowed access to the credit card numbers of more than 2 million members.