Use group policy to block access to modify account settings outlook/exchange 2010.

  • Thread starter Heero Yui
  • Start date Views 1,481
Status
Not open for further replies.
H

Heero Yui

We are trying to tie down our enviroment and stop users being able to edit or add accounts to their profile or edit the mail setting at all. Is there a GPO for this purpose or can you advise on appropriate settings to implement. Any help would be appreciated.

best regards

Heero

" The people that we care about are everything we are" - HalfLight
 
S

Sally Tang

Hi,

The registry to modify is as the following:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0\Outlook\Setup\ModifyAccounts

You need to set it to 0 to enable access, and 1 to block access.

As the default Outlook ADMX does not contain this policy, you may create a custom policy.

First, download the Office 2010 Administrative Template files (ADM, ADMX/ADML) and Office Customization Tool from the link below:

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=64b837b6-0aa0-4c07-bc34-bec3990a7956&displaylang=en

When you extract the downloaded file you will see following folders:

ADM - which contains adm files

Admin - which contains opa files

ADMX - which contains ADMX files

In ADMX, outlk14.admx, there is a policy: PreventusersfrommakingchangestoOutlookprofiles

<policy name=" L_PreventusersfrommakingchangestoOutlookprofiles" class=" User" displayName=" $(string.L_PreventusersfrommakingchangestoOutlookprofiles)" explainText=" $(string.L_CheckedTheOutlookEmailAccountscommandontheToolsmenuEmailAcco)" key=" software\policies\microsoft\office\14.0\outlook\setup" valueName=" modifyaccounts" >

It"s under the citatory: Miscellaneous.

Hope it helps.

Sally Tang
 
Status
Not open for further replies.
Top