Forum Discussion
disable PST backup or export for some users.
Hi BilalRajput1145,
thank for the additional update of your question.To create a policy through Intune/MDM for disabling PST export or backup, follow these steps:
- Log in to the Microsoft Intune admin center.
- Navigate to Devices > Configuration profiles > Create profile.
- Input the following details:
- Platform: Choose Windows 10 and later.
- Profile: Opt for Settings catalog.
- Click on Create.
In this context, we will address two Outlook and PST policies:
- Prevent users from adding new content to existing PST files (User).
- Prevent users from adding PSTs to Outlook profiles or using Sharing-Exclusive PSTs (User).
Both policies are user-based.
You can refer to the guide to Create Intune Settings Catalog Policy and deploy it only to a set of Intune Managed Windows 11 or Windows 10 devices using Intune Filters:
www.anoopcnair.com
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)
Hi BilalRajput1145,
yes, it is possible to disable PST export or backup for specific users in Microsoft 365 and it is possible by implementing a policy.
To control PST use and creation in Microsoft Outlook, follow these steps:
Prevent users from adding new data or content to an existing .pst file:
- Open Registry Editor.
- Navigate to the registry subkey HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\xx.0\Outlook\PST (create the key if it doesn't exist).
- Create a DWORD Value named PSTDisableGrow.
- Set the value of PSTDisableGrow to 1.
Prevent users from adding new .pst files:
- Open Registry Editor.
- Go to the registry subkey HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\xx.0\Outlook (create the key if needed).
- Create a DWORD Value named DisablePST.
- Set the value of DisablePST to 1.
***The xx.0 placeholder represents the Outlook version (16.0 = Outlook 2016 and Outlook for Microsoft 365, 15.0 = Outlook 2013, 14.0 = Outlook 2010, 12.0 = Outlook 2007). Remember to back up the registry before making changes.
For mobile devices, consider using an MDM solution.
Policy to control PST use and creation in Microsoft Outlook - Exchange | Microsoft Learn
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.
If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)
LeonPavesic Thank you for the brief answer, i know this is the resolution for the above query, i also would like to know how to create a policy from intune/MDM for the same.
Hi BilalRajput1145,
thank for the additional update of your question.To create a policy through Intune/MDM for disabling PST export or backup, follow these steps:
- Log in to the Microsoft Intune admin center.
- Navigate to Devices > Configuration profiles > Create profile.
- Input the following details:
- Platform: Choose Windows 10 and later.
- Profile: Opt for Settings catalog.
- Click on Create.
In this context, we will address two Outlook and PST policies:
- Prevent users from adding new content to existing PST files (User).
- Prevent users from adding PSTs to Outlook profiles or using Sharing-Exclusive PSTs (User).
Both policies are user-based.
You can refer to the guide to Create Intune Settings Catalog Policy and deploy it only to a set of Intune Managed Windows 11 or Windows 10 devices using Intune Filters:
www.anoopcnair.com
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)re: Configuring office installed activated by @intervarsity.org accounts from being able to export prevent .pst data from Outlook installed on Windows, macOS, or from Outlook on the web.
This intune policy does the job on windows intune-enrolled devices.
But we manage only about 1/10th of our devices (Windows and macOS) with Intune, so a functioning policy in Intune wouldn’t help 90% of our devices.
How can a prevent download of pst limitation to be applied to
Azure,
our tenant, or
the "Microsoft 365 Apps admin center" at https://config.office.com/officeSettings ?
LeonPavesic Thank you very much for the answer.
