asked on

Outlook Programmatic Access and GPO on replace mode

We can´t enable the options for Programmatic Access on Outlook 2016.

Tried all the registry changes via GPO and opened Outlook as admin but the options still stay grayed out.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\x.0\Outlook\Security

HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\outlook\security
DWORD: PromptOOMSend
Value: 2
DWORD: AdminSecurityMode
Value: 3
DWORD: promptoomaddressinformationaccess
Value: 2
DWORD: promptoomaddressbookaccess
Value: 2

I have seen that GPO is on "replace mode" and read that HKEY_CURRENT_USER -settings are ignored on the "replace mode".
Is that true and how does it effect on this ?
Is the whole GPO created on wrong way? I have never seen that before.
replace-mode.PNG

Noah

Hi there! :)

Please try this .reg file that I have attached. What it is meant to do it to configure Outlook is to use Group Policy Security settings and set the Guard Behavior to Automatically approve for each prompt. Afterwards, try restarting your computer and run Outlook as an Administrator again.
disable-programmatic-security-outlok.reg

Member_2_5295610

ASKER

Thank you,
will try this. But please see the attachment on this ticket. Would "replace mode" ignore all the current user settings?

Shaun Vermaak

Yes

ASKER CERTIFIED SOLUTION

Noah

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Noah

Thank you for marking a solution. Did the registry command work for you?

Member_2_5295610

ASKER

Thank you for your help!
Last question, could you explain why there is high risk of more problem when GPO needed to be updated again?

Noah

It's because the updates may directly affect some of the GPOs set. For example,if the update specifies that a certain policy is now restricted or changed, the GPO might find compatibility issues. This is evident when you have to share files and there are updates specifying drastic changes to file permissions users/admins can set.

Member_2_5295610

ASKER

No, the registry change doesn´t work, but as I suppose this comes from the error of having replace mode enabled, it is ok.
I have tried all kind of registry settings but as the Current User settings are ignored, maybe it can´t be fixed now without changing the mode.

Noah

Try changing the mode then revert back after you run that registry key file. I suspect it may not work for 2016 even though I coded it that way which I tested and worked for 2010 and 2013. I suspect it's something like those "drastic updates" I mentioned earlier.