Map classic Outlook policies to new Outlook
If your organization uses policies to configure classic Outlook, you might want to implement comparable policies for new Outlook. All ADMX policies and most policies from Cloud Policy service for Microsoft 365 (Cloud policies) apply only to classic Outlook. This article discusses how you can map ADMX and Cloud policies for classic Outlook to the following policies for new Outlook:
- Cloud policies that apply to new Outlook
- Mailbox policies for Outlook on the web and new Outlook (Outlook on the web mailbox policies)
Note
Outlook on the web mailbox policies also affect new Outlook.
Find existing policies for classic Outlook
Cloud policies
Use the following steps to find the existing Cloud policies for classic Outlook that are used in your organization:
Sign in to the Microsoft 365 Apps admin center.
Select Customization > Policy Management to view a list of policy configurations.
Note: A policy configuration is a set of Cloud policies. Each policy configuration is scoped to a set of users.
For each policy configuration, select its checkbox, and then select Export to generate a CSV file that lists all policies that are in the policy configuration.
For each policy that's listed in an exported CSV file, the Setting ID value contains the policy ID. If a Setting ID value consists of multiple values that are separated by a semicolon, ignore
outlk16
. Typically, pick the rightmost value. Make a list of the applicable policy IDs for all policies that are in the exported CSV files.
Note
If the Scope value in the exported CSV file is Group
, the Groups value names the groups that all policies in the policy configuration apply to. To identify a group's membership, see Bulk download members of a group.
ADMX policies
Use the following steps to determine the ADMX policies that are used in your organization:
Run the PowerShell cmdlet Get-GPOReport on a domain controller to get a list of Group Policies for a domain. Alternatively, you can view the list of Group Policies for a domain on the Settings tab of the Group Policy Management Console.
In the list of Group Policies for a domain, the ADMX policies for Outlook are listed under User Configuration (Enabled) > Policies > Administrative Templates > Microsoft Outlook 2016/<policy category>. For example, you might see an Outlook policy that's named Keep Search Folders in Exchange Online. Make a list of the Outlook policy names.
Search for each Outlook policy name in the language-specific administrative template file, outlk16.adml, to find the associated policy ID. For example, the Keep Search Folders in Exchange Online policy has the policy ID
L_KeepsearchfoldersinExchangeonline
. Make a list of the policy IDs.Tip
The outlk16.adml file is usually located in the %SystemRoot%\PolicyDefinitions\<locale> folder on a domain controller. Alternatively, you can download the outlk16.adml file from Group Policy Administrative Template files (ADMX/ADML).
Determine policies for new Outlook
Use the following tables to map classic Outlook policies to equivalent or related new Outlook policies.
If your organization directly edits registry keys instead of using Group Policy to configure classic Outlook, use the Registry values for classic Outlook column instead of the Policy IDs for classic Outlook column.
If the tables don't include a particular policy ID or registry value for classic Outlook, a comparable policy for new Outlook might not exist.
Table: Account management policies
Table: Attachment management policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_Level1Attachments • L_Level2AddFilePolicy • L_additionalextensions23 |
• showlevel1attach • fileextensionsaddlevel2 |
Configures how Outlook handles potentially dangerous email attachments. | Use the Set-OwaMailboxPolicy cmdlet together with one or more of the following parameters: • AllowedFileTypes • BlockedFileTypes • DirectFileAccessOnPrivateComputersEnabled • DirectFileAccessOnPublicComputersEnabled • ForceSaveFileTypes • ForceSaveMimeTypes For more information, see Specify what attachments can be downloaded. |
• L_DisableAttachmentPreviewing | • disableattachmentpreviewing | Specifies whether users can preview attachments in email messages. For more information, see Public attachment handling. | Use the Set-OwaMailboxPolicy cmdlet together with the ConditionalAccessPolicy parameter. To prevent attachment preview, set the parameter value to ReadOnlyPlusAttachmentsBlocked .Other related parameters: • DirectFileAccessOnPrivateComputersEnabled • DirectFileAccessOnPublicComputersEnabled |
• L_InternetAndNetworkPathsIntoHyperlinks | pgrfafo_25_1 | Configures how Outlook handles internet and network paths in email messages. | Use the Set-MailboxMessageConfiguration cmdlet together with the LinkPreviewEnabled parameter to control whether Outlook enables link previews in email messages. |
Table: Data sharing management policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_OSTCreation | • noost | Configures offline capabilities in Outlook. | Use the Set-OwaMailboxPolicy cmdlet together with the OfflineEnabledWin parameter to specify whether new Outlook can create files for offline use. For more information, see Disable offline mode. Note: New Outlook doesn't create OST files and instead uses cached mode. |
• L_TurnOffContactExport | • disableexportingcontact | Specifies whether users can export contacts from the Outlook address book. | Use the Set-OwaMailboxPolicy cmdlet together with the AllowCopyContactsToDeviceAddressBook parameter. |
• L_DoNotDownloadPhotosFromTheActiveDirectory | • downloadphotosfromad | Configures photo settings. | Use the Set-OwaMailboxPolicy cmdlet together with the DisplayPhotosEnabled parameter. |
• L_PreventCopyingOrMovingItemsBetweenAccounts | • disablecrossaccountcopy | Specifies whether users can copy and move items between Outlook accounts. | Use the Set-OwaMailboxPolicy cmdlet together with the ItemsToOtherAccountsEnabled parameter. |
• L_Preventusersfromaddingpsts • L_empty78 • L_Preventusersfromaddingnewcontentto |
• disablepst pstdisablegrow |
Controls what users can do with PST files. | Use the Set-OwaMailboxPolicy cmdlet together with the OutlookDataFile parameter. |
Table: Calendar management policies
For other mailbox calendar settings, see Set-MailboxCalendarConfiguration.
Table: Diagnostic policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_DisableSupportTicketCreationInOutlook | • disablesupportticketcreationinoutlook | Disables support ticket creation in Outlook. | Enable the Cloud policy: Disable support ticket creation in Outlook. |
• L_DisableSupportDiagnostics • L_DisableOnlineModeAuthDiagnostics |
• disablesupportdiagnostics • disableonlinemodeauthdiagnostics |
Configures diagnostic settings in Outlook. | Enable the Cloud policy: Disable support diagnostics in Outlook. For more information, see Get diagnostics feature for users to submit logs to Microsoft Support. |
• L_DisableSupportBackstage | • disablesupportbackstage | Configures Microsoft Support settings in Outlook. | Enable the Cloud policy: Disable the Support tab under the File menu in Outlook. To disable all support options, disable the Cloud policy: Allow access to Contact Support in the new Outlook. For more information, see Disable contact support. |
• L_Enablemailloggingtroubleshooting | • enablelogging | Enables mail logging in Outlook. | Enable the Cloud policy: Enable mail logging (troubleshooting). |
• L_DisableOutlookFeedbackFeatures | • disableoutlookfeedbackfeatures | Configures feedback settings in Outlook. | Use the Set-OwaMailboxPolicy cmdlet together with the FeedbackEnabled parameter to disable inline feedback surveys. To manage other feedback options, see Manage Microsoft feedback. |
Table: Mail configuration policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_MSGUnicodeformatwhendraggingtofilesystem | • msgformat | Specifies whether e-mail messages that are dragged from Outlook to the file system are saved in Unicode or ANSI format. | Use the Set-OwaMailboxPolicy cmdlet together with the UseISO885915 parameter. |
• L_RepliesOrForwardsToSignedEncryptedMessagesAreSignedEncrypted | • nocheckonsessionsecurity | Configures message encryption settings. | Manage message encryption |
• L_ReadingPane • L_Markitemasreadwhenselectionchanges • L_Waitxxxsecondsbeforemarkingitemsasread |
• previewdontmarkuntilchange • previewwaitseconds |
Configures Mark as Read behavior in the Outlook reading pane. | Use the Set-MailboxMessageConfiguration cmdlet together with the following parameters: • PreviewMarkAsReadBehavior • PreviewMarkAsReadDelaytime |
Table: Offline configuration policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_DisallowDownloadFullItemsFileCachedExchangeMode • L_InCachedExchangemakeSendReceiveF9nulloperation |
• nofullitems • nomanualonlinesync |
Configures Cached Exchange mode in Outlook. | Use the Set-OwaMailboxPolicy cmdlet together with the OfflineEnabledWin parameter. For more information, see Disable offline mode. |
Table: Security configuration policies
Policy IDs for classic Outlook | Registry values for classic Outlook | Notes | Policies for new Outlook |
---|---|---|---|
• L_RequestanSMIMEreceiptforallSMIMEsignedmessages • L_SMIMEinteroperabilitywithexternalclients • L_BehaviorforhandlingSMIMEmessages |
• requestsecurereceipt • externalsmime |
Configures S/MIME encryption settings in Outlook. | Use the Set-OwaMailboxPolicy cmdlet together with the parameter SMimeEnabled. Use the Set-SmimeConfig cmdlet together with the OWAAlwaysEncrypt parameter to specify whether Outlook automatically encrypts outgoing email messages. For more information, see Encrypt emails with S/MIME. |
• L_DonotdownloadpermissionlicenseforIRMemailduring | • donotacquiredrmlicenseonsync | Configures Information Rights Management (IRM) features in Outlook. | Use the Set-OwaMailboxPolicy cmdlet together with the IRMEnabled parameter. For more information, see Enable or disable IRM. |
• L_HideJunkMailUI | • disableantispam | Configures junk email settings. | Use the Set-OwaMailboxPolicy cmdlet together with the ReportJunkEmailEnabled parameter to specify paths for the Blocked senders list and Safe senders list. For more information, see Configure junk email settings. |
Table: Other features policies
Create policies for new Outlook
Cloud policies
To create Cloud policies, see Steps for creating a policy configuration.
Outlook on the web mailbox policies
To create and assign an Outlook on the web mailbox policy, follow these steps:
Create an Outlook on the web mailbox policy.
Tip
We recommend that you use PowerShell instead of the Exchange admin center (EAC) to create Outlook on the web mailbox policies because PowerShell supports more policy options.
Assign an Outlook on the web mailbox policy to a mailbox.
Note: An Outlook on the web mailbox policy is a set of Outlook policies. The Set-OwaMailboxPolicy cmdlet adds Outlook policies to an Outlook on the web mailbox policy. You can assign only one Outlook on the web mailbox policy to each user mailbox.
Tip
If you want to assign multiple Outlook on the web mailbox policies to the same user mailbox, add all applicable Outlook policies to a single Outlook on the web mailbox policy. Then assign the single Outlook on the web mailbox policy to the user mailbox.
To bulk assign the same Outlook on the web mailbox policy to multiple users, run the following cmdlets in Exchange Online PowerShell:
$users = Import-Csv -Path '<path to a CSV file that lists the users in a column named "User">' $users | ForEach-Object { Set-CASMailbox -Identity $_.User -OWAMailboxPolicy "<policy name>" }
To check the Outlook on the web mailbox policy for multiple users, run the following PowerShell code:
$users = Import-Csv -Path '<path to a CSV file that lists the users in a column named "User">' $userData = @() $users | ForEach-Object { $casMailbox = Get-CASMailbox -Identity $_.User $userData += [PSCustomObject]@{ DisplayName = $casMailbox.DisplayName PrimarySmtpAddress = $casMailbox.PrimarySmtpAddress OWAMailboxPolicy = $casMailbox.OWAMailboxPolicy } } $userData | Format-Table -AutoSize