Forum Discussion
New Outlook opens security hole
Hello, We just tested the New Outlook and discovered that it allows users to add personal Gmail accounts to their Outlook profile. We have intentionally blocked 3rd party email services to prevent d...
It seems this OWA policy only prevents adding new personal accounts to the New Outlook, but existing accounts will still work (tested).
What is even funnier, I can logout the account with the OWA policy enabled from New Outlook, add my Gmail account (policy not applied at this point) and then just add the initial account back. And all the accounts will just work, including Gmail.
Is there any policy to prevent users from removing their default accounts, so the OWA policy will be applied the whole time?