Forum Discussion

Garre_Akhil's avatar
Garre_Akhil
Copper Contributor
Jul 10, 2025

How to Enforce Office Add-In Restrictions via Intune for Azure AD-Joined Devices (Office 2013–2021)

Dear Community, We are currently migrating users from a traditional Windows Active Directory environment (where we used GPOs to restrict Office add-in management) to Microsoft 365 with Azure AD-join...
Intune
Mobile Application Management (MAM)
mobile device management (mdm)
GriJ's avatar
GriJ
Brass Contributor
Jul 11, 2025

Hello,

you can try to import/migrate the GPO to Intune

 

https://learn.microsoft.com/en-us/intune/intune-service/configuration/group-policy-analytics

OR

you try to find out if you can set this with https://config.office.com/ ( Office Cloud Policy Service OCPS) 

  1. Go to https://config.office.com
  2. Sign in with an admin account.
  3. Navigate to Customization > Policy Management
  4. Create a new policy configuration or edit an existing one.

 

OR use Intune Admin Templates

  1. Go to Intune Admin Center > Devices > Configuration profiles
  2. Create a new profile:
    • Platform: Windows 10 and later
    • Profile type: Templates > Administrative Templates
  3. Search for:
    • "List of managed add-ins" under the relevant Office app (e.g., Outlook, Word)
  4. Configure the add-in with:
    • Load Behavior: 3 (Load at startup)
    • User Control: 0 (Users cannot change)

This mimics traditional GPO behavior in a cloud-native way

 

 

BR

 

 

 

Resources