Intune – macOS – Outlook App-Restriction

In post explains how to restrict institutional accounts in outlook desktop app for macOS. Currently, Intune app protection policy feature is still not available for macOS platform.

Below payload was created using profile manger, using the below payload, there are plenty of other restriction can be added but the below example is targeted to prevent user from using personal account in outlook app.

change the below values according to your environment.

AllowedEmailDomains = contoso.com

AllowedEmailDomains = Enabled

DisableExport = True

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EditorSettings</key>
<dict>
<key>DisableOptionalKeys</key>
<true/>
<key>DistributionMethod</key>
<string>Any</string>
<key>PayloadContentStyle</key>
<string>Profile</string>
<key>PlatformIOS</key>
<true/>
<key>PlatformMacOS</key>
<true/>
<key>PlatformTvOS</key>
<true/>
<key>ScopeSystem</key>
<true/>
<key>ScopeSystemManaged</key>
<true/>
<key>ScopeUser</key>
<true/>
<key>ScopeUserManaged</key>
<true/>
<key>ShowCustomizedKeys</key>
<true/>
<key>ShowDisabledKeys</key>
<true/>
<key>ShowHiddenKeys</key>
<false/>
<key>ShowSupervisedKeys</key>
<true/>
<key>ShowUserApprovedKeys</key>
<true/>
<key>SignProfile</key>
<false/>
</dict>
<key>PFCConfVersion</key>
<integer>1</integer>
<key>PayloadSettings</key>
<dict>
<key>managedPreferencesApplications</key>
<dict>
<key>com.microsoft.Outlook</key>
<array>
<dict>
<key>AllowedEmailDomains</key>
<array>
<string>azureessentials.in</string>
</array>
<key>EnableNewOutlook</key>
<integer>0</integer>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.281C8D83-EF55-4587-92F6-77130EE9CEA5.com.microsoft.Outlook.C84CB835-5EB2-4F54-92EC-E27F020A4980</string>
<key>PayloadUUID</key>
<string>C84CB835-5EB2-4F54-92EC-E27F020A4980</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>SignInOptions</key>
<integer>2</integer>
</dict>
</array>
</dict>
</dict>
<key>ProfileSettings</key>
<dict>
<key>PayloadDescription</key>
<string>Prevent user from adding personal account.</string>
<key>PayloadDisplayName</key>
<string>Outlook App Restriction</string>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.281C8D83-EF55-4587-92F6-77130EE9CEA5</string>
<key>PayloadOrganization</key>
<string>AzureEssentails</string>
<key>PayloadScope</key>
<string>user</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>281C8D83-EF55-4587-92F6-77130EE9CEA5</string>
<key>PayloadVersion</key>
<integer>1</integer>		
</dict>
<key>ViewSettings</key>
<dict>
<key>managedPreferencesApplications</key>
<dict>
<key>com.microsoft.Outlook</key>
<array>
<dict>
<key>AllowedEmailDomains</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>AutomaticallyDownloadExternalContent</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
<key>DisableExport</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>DisableImport</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>EnableNewOutlook</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>SignInOptions</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
</dict>
</array>
</dict>
<key>manifestsApple</key>
<dict>
<key>Configuration</key>
<array>
<dict>
<key>PayloadDescription</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
<key>PayloadOrganization</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
<key>PayloadScope</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
</dict>
</array>
</dict>
</dict>
</dict>
</plist>
	

The above profile can be added in Intune under device configuration as custom profile.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: