다음을 통해 공유


Map classic Outlook policies to new Outlook

If your organization uses policies to configure classic Outlook, you might want to implement comparable policies for new Outlook. All ADMX policies and most policies from Cloud Policy service for Microsoft 365 (Cloud policies) apply only to classic Outlook. This article discusses how you can map ADMX and Cloud policies for classic Outlook to the following policies for new Outlook:

Note

Outlook on the web mailbox policies also affect new Outlook.

Find existing policies for classic Outlook

Cloud policies

Use the following steps to find the existing Cloud policies for classic Outlook that are used in your organization:

  1. Sign in to the Microsoft 365 Apps admin center.

  2. Select Customization > Policy Management to view a list of policy configurations.

    Note: A policy configuration is a set of Cloud policies. Each policy configuration is scoped to a set of users.

  3. For each policy configuration, select its checkbox, and then select Export to generate a CSV file that lists all policies that are in the policy configuration.

  4. For each policy that's listed in an exported CSV file, the Setting ID value contains the policy ID. If a Setting ID value consists of multiple values that are separated by a semicolon, ignore outlk16. Typically, pick the rightmost value. Make a list of the applicable policy IDs for all policies that are in the exported CSV files.

Note

If the Scope value in the exported CSV file is Group, the Groups value names the groups that all policies in the policy configuration apply to. To identify a group's membership, see Bulk download members of a group.

ADMX policies

Use the following steps to determine the ADMX policies that are used in your organization:

  1. Run the PowerShell cmdlet Get-GPOReport on a domain controller to get a list of Group Policies for a domain. Alternatively, you can view the list of Group Policies for a domain on the Settings tab of the Group Policy Management Console.

  2. In the list of Group Policies for a domain, the ADMX policies for Outlook are listed under User Configuration (Enabled) > Policies > Administrative Templates > Microsoft Outlook 2016/<policy category>. For example, you might see an Outlook policy that's named Keep Search Folders in Exchange Online. Make a list of the Outlook policy names.

  3. Search for each Outlook policy name in the language-specific administrative template file, outlk16.adml, to find the associated policy ID. For example, the Keep Search Folders in Exchange Online policy has the policy ID L_KeepsearchfoldersinExchangeonline. Make a list of the policy IDs.

    Tip

    The outlk16.adml file is usually located in the %SystemRoot%\PolicyDefinitions\<locale> folder on a domain controller. Alternatively, you can download the outlk16.adml file from Group Policy Administrative Template files (ADMX/ADML).

Determine policies for new Outlook

Use the following tables to map classic Outlook policies to equivalent or related new Outlook policies.

If your organization directly edits registry keys instead of using Group Policy to configure classic Outlook, use the Registry values for classic Outlook column instead of the Policy IDs for classic Outlook column.

If the tables don't include a particular policy ID or registry value for classic Outlook, a comparable policy for new Outlook might not exist.


Table: Account management policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_Preventusersfromaddingemailaccounttypes
• L_PreventusersfromaddingIMAPemailaccounts
• L_PreventusersfromaddingPOP3emailaccounts
• L_PreventusersfromaddingExchangeemailaccounts
• L_PreventusersfromaddingEASemailaccounts
• L_Preventusersfromaddingothertypesofemailaccounts
• disableimap
• disablepop3
• disableexchange
• disableeas
• disableothertypes
Controls whether users can add personal email accounts to Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the parameter PersonalAccountsEnabled. For more information, see Allow only corporate mailboxes to be added.
• L_AutomaticallyConfigureProfileBasedOnActive • zeroconfigexchange Configures the primary account in Outlook. Enable the Cloud policy: Require the Primary Account to match the Windows signed-in account.
For more information, see Automatically configure account.
Note: We strongly recommend that you enable this Cloud policy if you disable personal accounts.

Table: Attachment management policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_Level1Attachments
• L_Level2AddFilePolicy
• L_additionalextensions23
• showlevel1attach
• fileextensionsaddlevel2
Configures how Outlook handles potentially dangerous email attachments. Use the Set-OwaMailboxPolicy cmdlet together with one or more of the following parameters:
• AllowedFileTypes
• BlockedFileTypes
• DirectFileAccessOnPrivateComputersEnabled
• DirectFileAccessOnPublicComputersEnabled
• ForceSaveFileTypes
• ForceSaveMimeTypes
For more information, see Specify what attachments can be downloaded.
• L_DisableAttachmentPreviewing • disableattachmentpreviewing Specifies whether users can preview attachments in email messages. For more information, see Public attachment handling. Use the Set-OwaMailboxPolicy cmdlet together with the ConditionalAccessPolicy parameter. To prevent attachment preview, set the parameter value to ReadOnlyPlusAttachmentsBlocked.
Other related parameters:
• DirectFileAccessOnPrivateComputersEnabled
• DirectFileAccessOnPublicComputersEnabled
• L_InternetAndNetworkPathsIntoHyperlinks pgrfafo_25_1 Configures how Outlook handles internet and network paths in email messages. Use the Set-MailboxMessageConfiguration cmdlet together with the LinkPreviewEnabled parameter to control whether Outlook enables link previews in email messages.

Table: Data sharing management policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_OSTCreation • noost Configures offline capabilities in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the OfflineEnabledWin parameter to specify whether new Outlook can create files for offline use. For more information, see Disable offline mode.
Note: New Outlook doesn't create OST files and instead uses cached mode.
• L_TurnOffContactExport • disableexportingcontact Specifies whether users can export contacts from the Outlook address book. Use the Set-OwaMailboxPolicy cmdlet together with the AllowCopyContactsToDeviceAddressBook parameter.
• L_DoNotDownloadPhotosFromTheActiveDirectory • downloadphotosfromad Configures photo settings. Use the Set-OwaMailboxPolicy cmdlet together with the DisplayPhotosEnabled parameter.
• L_PreventCopyingOrMovingItemsBetweenAccounts • disablecrossaccountcopy Specifies whether users can copy and move items between Outlook accounts. Use the Set-OwaMailboxPolicy cmdlet together with the ItemsToOtherAccountsEnabled parameter.
• L_Preventusersfromaddingpsts
• L_empty78
• L_Preventusersfromaddingnewcontentto
• disablepst
pstdisablegrow
Controls what users can do with PST files. Use the Set-OwaMailboxPolicy cmdlet together with the OutlookDataFile parameter.

Table: Calendar management policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_ShortenEventsType
• L_SelecttheShortenEventsType
• L_EnableEndEarly
• shortenevents
• endeventsearly
Shortens appointments and meetings by ending them early. Use the Set-OrganizationConfig cmdlet together with one or more of the following parameters:
• DefaultMinutesToReduceShortEventsBy
• DefaultMinutesToReduceLongEventsBy
• ShortenEventScopeDefault
• L_Firstweekofyear
• L_Choosethefirstweekoftheyear
• L_Firstdayoftheweek
• L_Choosethefirstdayoftheweek
• firstwoy
• firstdow
Configures the first week of the year, and the first day of the week. Use the Set-MailboxCalendarConfiguration cmdlet together with one or more of the following parameters:
• FirstWeekOfYear
• WeekStartDay
• L_Accesstopublishedcalendars • restrictedaccessonly Specifies whether users can access published calendars. Use the Set-OwaMailboxPolicy cmdlet together with the InterestingCalendarsEnabled parameter.
• L_Restrictuploadmethod
• L_PreventpublishingtoOfficeOnline
• singleuploadonly
• disableofficeonline
Configures calendar sharing settings in Outlook. Use the New-SharingPolicy cmdlet to create a sharing policy.
• L_Workinghours
• L_Starttime
• L_EndTime
• caldefstart
• caldefend
Configures a user's working hours in Outlook Calendar. Use the Set-MailboxCalendarConfiguration cmdlet together with one or more of the following parameters:
• WorkingHoursStartTime
• WorkingHoursEndTime
• L_RemindersonCalendaritems • apptreminders Configures reminders for Calendar items. Use the Set-OwaMailboxPolicy cmdlet together with the RemindersAndNotificationsEnabled parameter.
Use the Set-MailboxCalendarConfiguration cmdlet together with one or more of the following parameters:
• RemindersEnabled
• ReminderSoundEnabled

For other mailbox calendar settings, see Set-MailboxCalendarConfiguration.


Table: Diagnostic policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_DisableSupportTicketCreationInOutlook • disablesupportticketcreationinoutlook Disables support ticket creation in Outlook. Enable the Cloud policy: Disable support ticket creation in Outlook.
• L_DisableSupportDiagnostics
• L_DisableOnlineModeAuthDiagnostics
• disablesupportdiagnostics
• disableonlinemodeauthdiagnostics
Configures diagnostic settings in Outlook. Enable the Cloud policy: Disable support diagnostics in Outlook.
For more information, see Get diagnostics feature for users to submit logs to Microsoft Support.
• L_DisableSupportBackstage • disablesupportbackstage Configures Microsoft Support settings in Outlook. Enable the Cloud policy: Disable the Support tab under the File menu in Outlook.
To disable all support options, disable the Cloud policy: Allow access to Contact Support in the new Outlook.
For more information, see Disable contact support.
• L_Enablemailloggingtroubleshooting • enablelogging Enables mail logging in Outlook. Enable the Cloud policy: Enable mail logging (troubleshooting).
• L_DisableOutlookFeedbackFeatures • disableoutlookfeedbackfeatures Configures feedback settings in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the FeedbackEnabled parameter to disable inline feedback surveys.
To manage other feedback options, see Manage Microsoft feedback.

Table: Mail configuration policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_MSGUnicodeformatwhendraggingtofilesystem • msgformat Specifies whether e-mail messages that are dragged from Outlook to the file system are saved in Unicode or ANSI format. Use the Set-OwaMailboxPolicy cmdlet together with the UseISO885915 parameter.
• L_RepliesOrForwardsToSignedEncryptedMessagesAreSignedEncrypted • nocheckonsessionsecurity Configures message encryption settings. Manage message encryption
• L_ReadingPane
• L_Markitemasreadwhenselectionchanges
• L_Waitxxxsecondsbeforemarkingitemsasread
• previewdontmarkuntilchange
• previewwaitseconds
Configures Mark as Read behavior in the Outlook reading pane. Use the Set-MailboxMessageConfiguration cmdlet together with the following parameters:
• PreviewMarkAsReadBehavior
• PreviewMarkAsReadDelaytime

Table: Offline configuration policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_DisallowDownloadFullItemsFileCachedExchangeMode
• L_InCachedExchangemakeSendReceiveF9nulloperation
• nofullitems
• nomanualonlinesync
Configures Cached Exchange mode in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the OfflineEnabledWin parameter. For more information, see Disable offline mode.

Table: Security configuration policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_RequestanSMIMEreceiptforallSMIMEsignedmessages
• L_SMIMEinteroperabilitywithexternalclients
• L_BehaviorforhandlingSMIMEmessages
• requestsecurereceipt
• externalsmime
Configures S/MIME encryption settings in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the parameter SMimeEnabled.
Use the Set-SmimeConfig cmdlet together with the OWAAlwaysEncrypt parameter to specify whether Outlook automatically encrypts outgoing email messages.
For more information, see Encrypt emails with S/MIME.
• L_DonotdownloadpermissionlicenseforIRMemailduring • donotacquiredrmlicenseonsync Configures Information Rights Management (IRM) features in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the IRMEnabled parameter.
For more information, see Enable or disable IRM.
• L_HideJunkMailUI • disableantispam Configures junk email settings. Use the Set-OwaMailboxPolicy cmdlet together with the ReportJunkEmailEnabled parameter to specify paths for the Blocked senders list and Safe senders list.
For more information, see Configure junk email settings.

Table: Other features policies
Policy IDs for classic Outlook Registry values for classic Outlook Notes Policies for new Outlook
• L_BlockAllUnmanagedAddins
• L_ListOfManagedAddins
• L_ListOfManagedAddins2
• L_SetTrustedAddins
• L_ListOfTrustedAddins
• restricttolist Controls Outlook add-ins. Use the Set-OrganizationConfig cmdlet together with the AppsForOfficeEnabled parameter to enable or disable send add-ins.
For more information, see Add-ins for Outlook.
• L_KeepsearchfoldersinExchangeonline
• L_SpecifydaystokeepfoldersaliveinExchangeonlinemode
• L_SetDefaultSearchScope
• L_SetDefaultSearchScopeDropID
• searchonlinekeepalivedays
• defaultsearchscope
Configures Search Folders and search options in Outlook. Use the Set-OwaMailboxPolicy cmdlet together with the SearchFoldersEnabled parameter.
• L_DisableFileArchive
• L_AutoArchiveSettings
• L_TurnonAutoArchive
• L_Permanentlydeleteolditems
• L_empty19
• L_Cleanoutitemsolderthan
• L_Showarchivefolderinfolderlist
• L_Archiveordeleteolditems
• L_Deleteexpireditemsemailfoldersonly
• L_PromptbeforeAutoArchiveruns
• L_RunAutoArchiveeveryxdays
• disablemanualarchive
• doaging
• archivedelete
• archivegranularity
• archiveperiod
• archivemount
• archiveold
• deleteexpired
• promptforaging
• everydays
Configures mailbox archive settings. Use the Set-OwaMailboxPolicy cmdlet together with the ShowOnlineArchiveEnabled parameter.
• L_DisableSignatures • disablesignatures Specifies whether users can add signatures to e-mail messages. Use the Set-OwaMailboxPolicy cmdlet together with the SignaturesEnabled parameter.
• L_Alwayscheckspellingbeforesending • check Configures spell checker settings. Use the Set-OwaMailboxPolicy cmdlet together with the SpellCheckerEnabled parameter.
• L_DisableWeather
• L_WeatherServiceUrl
• L_Empty
• disableweather
• weatherserviceurl
Configures weather service features in Outlook. • Use the Set-OwaMailboxPolicy cmdlet together with the WeatherEnabled parameter.
• Use the Set-MailboxCalendarConfiguration cmdlet together with the WeatherLocationBookmark parameter.

Create policies for new Outlook

Cloud policies

To create Cloud policies, see Steps for creating a policy configuration.

Outlook on the web mailbox policies

To create and assign an Outlook on the web mailbox policy, follow these steps:

  1. Create an Outlook on the web mailbox policy.

    Tip

    We recommend that you use PowerShell instead of the Exchange admin center (EAC) to create Outlook on the web mailbox policies because PowerShell supports more policy options.

  2. Assign an Outlook on the web mailbox policy to a mailbox.

    Note: An Outlook on the web mailbox policy is a set of Outlook policies. The Set-OwaMailboxPolicy cmdlet adds Outlook policies to an Outlook on the web mailbox policy. You can assign only one Outlook on the web mailbox policy to each user mailbox.

    Tip

    If you want to assign multiple Outlook on the web mailbox policies to the same user mailbox, add all applicable Outlook policies to a single Outlook on the web mailbox policy. Then assign the single Outlook on the web mailbox policy to the user mailbox.

    To bulk assign the same Outlook on the web mailbox policy to multiple users, run the following cmdlets in Exchange Online PowerShell:

    $users = Import-Csv -Path '<path to a CSV file that lists the users in a column named "User">'
    $users | ForEach-Object { Set-CASMailbox -Identity $_.User -OWAMailboxPolicy "<policy name>" }
    

    To check the Outlook on the web mailbox policy for multiple users, run the following PowerShell code:

    $users = Import-Csv -Path '<path to a CSV file that lists the users in a column named "User">'
    $userData = @()
    $users | ForEach-Object {
      $casMailbox = Get-CASMailbox -Identity $_.User
      $userData += [PSCustomObject]@{
        DisplayName = $casMailbox.DisplayName
        PrimarySmtpAddress = $casMailbox.PrimarySmtpAddress
        OWAMailboxPolicy  = $casMailbox.OWAMailboxPolicy
      }
    }
    $userData | Format-Table -AutoSize