Use group policy to block access to modify account settings outlook/exchange 2010.

Not open for further replies.

Heero Yui

We are trying to tie down our enviroment and stop users being able to edit or add accounts to their profile or edit the mail setting at all. Is there a GPO for this purpose or can you advise on appropriate settings to implement. Any help would be appreciated.

best regards


" The people that we care about are everything we are" - HalfLight

Sally Tang


The registry to modify is as the following:


You need to set it to 0 to enable access, and 1 to block access.

As the default Outlook ADMX does not contain this policy, you may create a custom policy.

First, download the Office 2010 Administrative Template files (ADM, ADMX/ADML) and Office Customization Tool from the link below:

When you extract the downloaded file you will see following folders:

ADM - which contains adm files

Admin - which contains opa files

ADMX - which contains ADMX files

In ADMX, outlk14.admx, there is a policy: PreventusersfrommakingchangestoOutlookprofiles

<policy name=" L_PreventusersfrommakingchangestoOutlookprofiles" class=" User" displayName=" $(string.L_PreventusersfrommakingchangestoOutlookprofiles)" explainText=" $(string.L_CheckedTheOutlookEmailAccountscommandontheToolsmenuEmailAcco)" key=" software\policies\microsoft\office\14.0\outlook\setup" valueName=" modifyaccounts" >

It"s under the citatory: Miscellaneous.

Hope it helps.

Sally Tang
Not open for further replies.