Forum Discussion
drogu-kangaroo
May 22, 2023Copper Contributor
New Outlook opens security hole
Hello, We just tested the New Outlook and discovered that it allows users to add personal Gmail accounts to their Outlook profile. We have intentionally blocked 3rd party email services to prevent d...
Victor_Ivanidze
May 24, 2023Bronze Contributor
Hello,
but the old Outlook also allows users to add personal Gmail accounts to their Outlook profile, isn't it?
but the old Outlook also allows users to add personal Gmail accounts to their Outlook profile, isn't it?
- RobYoungMay 24, 2023Iron ContributorThe old outlook allows you to block via policy. The new outlook creates a connection to your gmail and syncs everything to Microsoft Cloud and the old policies do not apply. I am also trying to find a way to disable this feature.
- RobYoungMay 24, 2023Iron ContributorJust an FYI, I am just in the process of testing the OWA polices which seem to apply to both Outlook on the Web and "New Outlook".
I have setup a test OWA policy:
New-OwaMailboxPolicy TestOWAPolicy
Then I disabled personal accounts:
Set-OwaMailboxPolicy -PersonalAccountsEnabled -$false -identity TestOWAPolicy
Then I applied the policy to a test user:
Set-CASMailbox email address removed for privacy reasons -OwaMailboxPolicy TestOWAPolicy
Just waiting for the policy to kick-in.
Here is the link for reference:
https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/apply-or-remove-outlook-web-app-mailbox-policy- drogu-kangarooMay 29, 2023Copper ContributorHello Robert,
I appreciate your response. I am very curious if this worked for you. Can you update us on the results?