Disable Outlook Anywhere in Group Policy Object (GPO)

By default the standard outlk12.adm templates do not come with a configuration of Outlook Anywhere. You can configure the “Configure Outlook Anywhere user interface options” options to disable or grey out the settings. However, this DOES NOT disable Outlook anywhere, just user interaction with it.

You will need to download a new administrative template that Microsoft released in this hotfix. If you don’t like reading Microsoft’s wonderful support site instructions or Microsoft changes their support site after this blog post, here is the file and instructions paraphrased.

1. Download Add-On Outlook Anywhere Administrative Template here…article-961112 (unzip to reveal article-961112.adm file).
2. In the Group Policy Object Editor add the Article-961112.adm file:
Right-click Administrative Templates and click Add/Remove Templates.
In the Add/Remove Templates dialog box click Add.
In the Policy Templates dialog box locate and select the Article-961112.adm file. Click Open.
Click Close in the Add/Remove Templates dialog box.
3. Under User Configuration in Administrative Templates expand the policy node labeled Article 961112 Policy Settings. (Note: You may see this under Classic Administrative Templates in a sub-menu)
4. Select the Outlook Anywhere (RPC/HTTP) node to list the following policies under the Setting column in the right-pane:

RPC/HTTP Connection Flags -> Set to Enabled -> No Flags
Proxy Server Name -> Do not change
Only Connect if Proxy Server certificate has this principle name -> Do not change
Proxy authentication Setting -> Do not change

5. Double-click each policy to configure the appropriate RPC/HTTP setting for your Outlook clients.

9 Comments

  1. designworks

    Thanks for the guide. Just wanted to clarify what you mean by ‘do not change’ in Step 4. Do you mean leave the GP setting as ‘not configured’, to use the language that the GPO editor uses?

    1. Chris Titus

      Yes, Not Configured is the System Default and is without change. As a best practice when doing something you are unsure of in Group Policy, ALWAYS create a new GPO. I’ve seen some small businesses with tons of configured settings in one GPO which is a nightmare to troubleshoot.

      1. designworks

        Good advice. I was already doing so. =)

  2. designworks

    Geeze has it really been a year between posts? Ouch, slow going!

    running ‘gpresult’ shows that the policy is being picked up by the machine but its making zero changes to the configuration of Outlook Anywhere on the already configured client. Should this be able to override the Autodiscover settings pushed out by Exchange?

    BTW, you have spelt ‘Professional’ wrong in your website banner.

    1. Chris Titus

      Thanks for the typo correction. I typically post once a month or if I run into an interesting issue, but on a certain field I might only post once a year since I do a vast array of things for my job.

      As for your issue, the GPO for Outlook Anywhere was poorly designed and runs off Flags 1+2+3+4 or any combination of those. It sounds like it would be a erroneous setting, incorrect scope in GPO, or GPO not in proper location in Group Policy Management. First step would be to change a setting in the GPO and run gpupdate, but I’d suggest doing this in a test environment/limited scope, or changing a small setting that doesn’t affect end users.

      1. Chris Titus

        P.S. This Admin Template was provided for Outlook 2007 and may or may not work on later versions.

        1. designworks

          Sorry, I wasn’t having a go at you at all. It was actually directed at myself. It’s been 1 year since *I* posted on here on this topic. =/

          Thanks for your suggestions. I will give those at try.

        2. designworks

          Hi again,

          You hit the nail on the head with the above. I googled for an Outlook 2010 specific admin template and found one and it fixed my issue. WOOT! Im sure your readers would appreciate the link too so here it is. http://support.microsoft.com/kb/2426686

          Just download and use that template file for Outlook 2010 installs. The other one doesn’t seem to work. For 2010 at least (I have not tested it with 2007 yet).

          1. Chris Titus

            Awesome, you have to love the simple fixes 😉

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: