To prevent users from adding additional work or school accounts in the new Outlook app and the classic app using Intune policy, you can utilize the AllowedOrganizationAccountDomains
and PersonalAccountsEnabled
parameters in the OwaMailboxPolicy. By configuring these parameters, you can restrict which accounts can be added to Outlook.
- AllowedOrganizationAccountDomains: This parameter allows you to specify which domains are permitted for adding accounts in Outlook. You can set this to limit the accounts to only those from your organization.
- PersonalAccountsEnabled: Setting this parameter to
$false
will prevent users from adding personal accounts once their work or school account is added.
Additionally, for managed devices, you can use app configuration policies to control which accounts are allowed. This ensures that only organization accounts can be added, effectively blocking personal accounts.
References: