none
disable Outlook 2013 GPO

    Question

  • Hi,

    we are using Lotus mail.

    Cannot find the option for disabling Outlook (Office 2013 suite)

    There is an option for disabling  Lync (Skype) and OneDrive.

    Any help?

    Thanks.


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Tuesday, April 12, 2016 1:16 PM

Answers

  • can you not just add OUTLOOK.EXE in disallowed applications group policy. I do that, it appears to do the trick.

    Tuesday, April 12, 2016 1:32 PM
  • Am 12.04.2016 um 18:50 schrieb pob579:
    > In my situation I need to remove (ideally), or at least block some...
     
    Remove is only possible with a re-deployment.
     
    Blocking can be done via: NTFS permissions (GP security - Filesystem),
    Software Restriction Policies (Deny outlook.exe) or Applocker (Deny
    Outlook.exe)
     
    > May be somebody know the way to manage Add/Remove Office components
    > using GPO?
     
    setup.exe /adminfile
    this is only possible with the Volume Licence Media, because the
    PKC/OEM/whatever can not create the adminfile (MSP) you need for that
    switch.
    setup /admin is only a VLC feature.
     
    setup /config.xml
    is functional in all versions, but not that easy to configure.
     
     
    To remove Outlook, it should look like that:
      <OptionState Id="OUTLOOKFiles" State="absent" Children="force" />
     
    See:
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    • Marked as answer by pob579 Wednesday, April 13, 2016 1:59 PM
    Wednesday, April 13, 2016 12:50 PM
  • Hi,

    I have test for disable some applications in GPO and it works(the DC is Windows Server 2012, the client is Windows 10 with Outlook 2016).

    I configure the "Don't run specified Windows applications" setting under the path below.

    User Configuration\Policies\Administrative Templates\system

    I think you could try to configure the setting.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Jay GuModerator Friday, April 15, 2016 6:15 AM
    • Marked as answer by pob579 Monday, May 9, 2016 7:17 PM
    Friday, April 15, 2016 6:12 AM
    Moderator

All replies

  • Hi,
     
    Am 12.04.2016 um 15:16 schrieb pob579:
    > Cannot find the option for disabling Outlook (Office 2013 suite)
     
    Why did install it? Uninstall it. Buzzword: Custominstallation ...
     
    There ist no RegHack, like there is for Skydrive/Onedrive, which should
    be even uninstalled or at least should not be installed aswell ...
     
    To me it sounds a little bit stupid: install something an then disable
    it. Much better way: Do not install it, then there is no need for
    disabling!?
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Tuesday, April 12, 2016 1:21 PM
  • can you not just add OUTLOOK.EXE in disallowed applications group policy. I do that, it appears to do the trick.

    Tuesday, April 12, 2016 1:32 PM
  • Thanks dubsdj.

    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Tuesday, April 12, 2016 1:40 PM
  • just to "mute" how it sounds to you :)...

    imagine that big group of computers were imaged with Oulook installed as a component.

    Another doesn't have it as the enabled option. Even if it is not enabled user always can add it.

    To have total control of the situation I guess it is better just to prevent the option...

    I guess the advice for blocking executable is right in the situation when we cannot not turn off Office Component (as Link(Skype) ).


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Tuesday, April 12, 2016 1:46 PM
  • Am 12.04.2016 um 15:46 schrieb pob579:
    > imagine that big group of computers were imaged with Oulook installed as
    > a component.
     
    Still the question why?
    Thats, why you have a deployment. Create different ones for different
    groups and if Lotus is you mailclient, there is no need for Outlook.
     
    Just because of your "big group of computers":
    You have much less work, if you do NOT install like "setup - enter -
    enter -ok".
     
    Creating two Office packages with a custom install takes you 5 minutes?
    10? 10 maximum, when using "setup /admin".
     
    How many time do you need now to correct the wornng installation? Even
    redeploying Office could be the better idea, than working with NTFS
    permissions ...
     
    Justmy2cents.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Tuesday, April 12, 2016 2:07 PM
  • Mark,

    I believe, the best way to make things right is to have an option to uninstall unneeded Office components Centrally without explaining why... there could be a situation when you need to add /  remove office components.

    In my situation I need to remove (ideally), or at least block some...

    May be somebody know the way to manage Add/Remove Office components using GPO?


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Tuesday, April 12, 2016 4:50 PM
  • Am 12.04.2016 um 18:50 schrieb pob579:
    > In my situation I need to remove (ideally), or at least block some...
     
    Remove is only possible with a re-deployment.
     
    Blocking can be done via: NTFS permissions (GP security - Filesystem),
    Software Restriction Policies (Deny outlook.exe) or Applocker (Deny
    Outlook.exe)
     
    > May be somebody know the way to manage Add/Remove Office components
    > using GPO?
     
    setup.exe /adminfile
    this is only possible with the Volume Licence Media, because the
    PKC/OEM/whatever can not create the adminfile (MSP) you need for that
    switch.
    setup /admin is only a VLC feature.
     
    setup /config.xml
    is functional in all versions, but not that easy to configure.
     
     
    To remove Outlook, it should look like that:
      <OptionState Id="OUTLOOKFiles" State="absent" Children="force" />
     
    See:
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    • Marked as answer by pob579 Wednesday, April 13, 2016 1:59 PM
    Wednesday, April 13, 2016 12:50 PM
  • Thanks Mark.

    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Wednesday, April 13, 2016 1:59 PM
  • Hi,

    I have test for disable some applications in GPO and it works(the DC is Windows Server 2012, the client is Windows 10 with Outlook 2016).

    I configure the "Don't run specified Windows applications" setting under the path below.

    User Configuration\Policies\Administrative Templates\system

    I think you could try to configure the setting.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Jay GuModerator Friday, April 15, 2016 6:15 AM
    • Marked as answer by pob579 Monday, May 9, 2016 7:17 PM
    Friday, April 15, 2016 6:12 AM
    Moderator