AD Group Policy - GPO - Applying Outlook 2003 settings without locking down so users can still change

Posted on 2007-11-14
Last Modified: 2012-06-21

I have been playing with AD Group Policy settings for Outlook 2003 and have managed to create settings and apply OK to the Outlook client. The issue I have is that when I create a setting in GP it sets it and locks the setting so that it cant be changed by the user. Is there a way to change and apply the setting via Group Policy but still allow the user to change it if they want?

For example: I can set GPO to amend the tracking options on Outlook to the standard settings we want  but it then grey's out the option so that the user cant then change it. We would like to be able to change the default setting but then allow the user to change the setting if they want.

I assume that Im not the 1st person to hit this and GPO may not be the way forward - any guidance woudl be appreciated.



PS - my concerns are Outlook 2003 specific connecting to Exchange 2003
Question by:cmuir
  • 3
  • 3
LVL 70

Expert Comment

ID: 20279093
The purpose of GPOs is to enforce settings so what you are experiencing is normal behaviour and is by design. GPO settings are not designed to be overriden

Author Comment

ID: 20279121
I understand that and am looking for a way to change the default settings on multiple machines while still allowing users to change.
LVL 70

Expert Comment

ID: 20279125
I should have added that if you use the Office Resource Kit you can create a transform file to be used when office is installed that can be used to set many of the default options - but you can only do this during an install - more details at
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.


Author Comment

ID: 20279885
Nailed it - you can amend exactly the same settings as an after thought to install via creating a Custom Maintenance Wizard then running the CMW file that is created in this rough format.

Worked for me and allows us to tweak so many more settings

MaintWiz.exe /c \\filepath\CMTEST.CMW /qb-
LVL 70

Expert Comment

ID: 20279896
I've leaned something new too !

Author Comment

ID: 20280115
Yeah it looks great - exactly the same settings available as in GPO but they can be run at any time - ideal companion to Group Policies. Whole thing becoming much more clear now - kind of makes sense now

Accepted Solution

ee_auto earned 0 total points
ID: 24689908
Question PAQ'd, 50 points not refunded, and stored in the solution database.

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Facebook, email, text receiving unwanted messages 8 34
Change AD password via MS Access DB 2 20
MDM vs GPO 16 34
Handling abuse of email address 7 13
MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

30 Experts available now in Live!

Get 1:1 Help Now