Blog Post

Intune Customer Success
6 MIN READ

Support tip: Several Office settings in settings catalog may need parent settings enabled

Intune_Support_Team's avatar
Intune_Support_Team
Icon for Microsoft rankMicrosoft
Feb 18, 2022

Updated 05/03/2022: The updated settings are available in Microsoft Endpoint Manager. We’ve updated this post and the table below to reflect the new setting locations and parent settings.

 

We recently identified several Office settings in the Microsoft Intune settings catalog that, when enabled, do not automatically enable the required parent setting. This can lead to the policy not applying as expected if you did not configure the parent setting.

 

To help identify which configuration settings have this behavior, we recently made a user interface (UI) change to mark them as (deprecated) in the Settings catalog (preview) page. See the full list below.

 

We have released new device configuration settings (with the same name) that will automatically enforce the dependencies. 

 

What actions do I need to take?

Check your device configuration profiles to see if you are using a deprecated setting and update your profiles to use the new, replacement setting instead.

 

The following table lists the location of the deprecated setting in the settings catalog, as well as the new setting location and its required parent setting. For example, you can find the first setting listed below (Allow Active X One Off Forms (User)) in the Microsoft Endpoint Manager admin center Settings picker in Microsoft Outlook 2016 > Security> Security Form Settings, under the required parent setting Outlook Security Mode (User).

 

List of settings by category

Deprecated settings location

Replacement setting location (nested under required parent setting)

Microsoft Outlook 2016\Security
 >     Allow Active X One Off Forms (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Allow Active X One Off Forms (User)

Microsoft Outlook 2016\Security\Trust Center
 >     Allow hyperlinks in suspected phishing e-mail messages (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Allow hyperlinks in suspected phishing e-mail messages (User)

Microsoft Outlook 2016\Security\Security Form Settings\Custom Form Security
 >     Allow scripts in one-off Outlook forms (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
        ⇒     Allow scripts in one-off Outlook forms (User)

Microsoft Outlook 2016\Security\Security Form Settings\Attachment Security
 >     Allow users to demote attachments to Level 2 (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Allow users to demote attachments to Level 2 (User)

Microsoft Outlook 2016\Account Settings\Exchange
 >     Authentication with Exchange Server (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Authentication with Exchange Server (User)

Microsoft Outlook 2016\Security\Security Form Settings\Programmatic Security
 >     Configure Outlook object model prompt when accessing an address book (User) (Deprecated)
 >     Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (User) (Deprecated)
 >     Configure Outlook object model prompt when executing Save As (User) (Deprecated)
 >     Configure Outlook object model prompt when reading address information (User) (Deprecated)
 >     Configure Outlook object model prompt when responding to meeting and task requests (User) (Deprecated)
 >     Configure Outlook object model prompt when sending mail (User) (Deprecated)

Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Configure Outlook object model prompt when accessing an address book (User)
         ⇒     Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (User)
         ⇒     Configure Outlook object model prompt when executing Save As (User)
         ⇒     Configure Outlook object model prompt when reading address information (User)
         ⇒     Configure Outlook object model prompt when responding to meeting and task requests (User)
         ⇒     Configure Outlook object model prompt when sending mail (User)

Microsoft Publisher 2016\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins (User) (Deprecated)

Microsoft Publisher 2016\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins (User)

Microsoft Excel 2016\Excel Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)

Microsoft Excel 2016\Excel Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User)

Microsoft PowerPoint 2016\PowerPoint Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)

Microsoft PowerPoint 2016\PowerPoint Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User)

Microsoft Project 2016\Project Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)

Microsoft Project 2016\Project Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User)

Microsoft Visio 2016\Visio Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)

Microsoft Visio 2016\Visio Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User)

Microsoft Word 2016\Word Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)

Microsoft Word 2016\Word Options\Security\Trust Center
 >     Disable Trust Bar Notification for unsigned application add-ins and block them (User)

Microsoft Outlook 2016\Security\Security Form Settings\Attachment Security
 >     Display Level 1 attachments (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Display Level 1 attachments (User)

Microsoft Outlook 2016\Outlook Options\Other\Advanced
 >     Do not allow Outlook object model scripts to run for public folders (User) (Deprecated)
 >     Do not allow Outlook object model scripts to run for shared folders (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Do not allow Outlook object model scripts to run for public folders (User)
         ⇒     Do not allow Outlook object model scripts to run for shared folders (User)

Microsoft Outlook 2016\Account Settings\Exchange
 >     Enable RPC encryption (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Enable RPC encryption (User)

Microsoft Outlook 2016\Security\Automatic Picture Download Settings
 >     Include Internet in Safe Zones for Automatic Picture Download (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Include Internet in Safe Zones for Automatic Picture Download (User)

Microsoft Outlook 2016\Outlook Options\Preferences\Junk E-mail
 >     Junk E-mail protection level (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
        ⇒     Junk E-mail protection level (User)

Microsoft Outlook 2016\Security\Cryptography
 >     Minimum encryption settings (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
        ⇒     Minimum encryption settings (User)

Microsoft Outlook 2016\Security
 >     Prevent users from customizing attachment security settings (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Prevent users from customizing attachment security settings (User)

Microsoft Outlook 2016\Security\Security Form Settings\Attachment Security
 >     Remove file extensions blocked as Level 1 (User) (Deprecated)
 >     Remove file extensions blocked as Level 2 (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Remove file extensions blocked as Level 1 (User)
         ⇒     Remove file extensions blocked as Level 2 (User)
Microsoft Outlook 2016\Security\Cryptography\Signature Status dialog box
 >     Retrieving CRLs (Certificate Revocation Lists) (User) (Deprecated)		 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Retrieving CRLs (Certificate Revocation Lists) (User)

Microsoft Outlook 2016\Security\Trust Center
 >     Security setting for macros (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Security setting for macros (User)

Microsoft Outlook 2016\Security\Security Form Settings\Custom Form Security
 >     Set Outlook object model custom actions execution prompt (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Set Outlook object model custom actions execution prompt (User)
Microsoft Outlook 2016\Security\Cryptography
 >     Signature Warning (User) (Deprecated)		 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Signature Warning (User)

Microsoft Outlook 2016\Outlook Options\Other\Advanced
 >     Use Unicode format when dragging e-mail message to file system (User) (Deprecated)

 Microsoft Outlook 2016\Security\Security Form Settings
 >     Outlook Security Mode (User)
         ⇒     Use Unicode format when dragging e-mail message to file system (User)

 

If you have any questions or comments, reply to this post or reach out to @IntuneSuppTeam on Twitter.

 

Post updates:

05/03/2022: Updated text and table to reflect that the replacement settings have been released.

Updated Dec 19, 2023
Version 8.0
Support Tip
  • ishaqhotait's avatar
    ishaqhotait
    Copper Contributor
    Feb 21, 2022

    Good day

     

    First of all, thank you for the information. Could you also tell us what the parent settings for the above child settings are?

     

    Best thanks and greetings

     

    Ishaq

  • Intune_Support_Team's avatar
    Intune_Support_Team
    Icon for Microsoft rankMicrosoft
    Feb 28, 2022

    Hello ishaqhotait, we have reviewed this with our team and have gathered some information that may help. There are replacement settings in the works to tackle the deprecated settings. When these settings are released, they will have the same name as the deprecated settings. To differentiate between the two sets of settings, the latter will say deprecated and the new will not. The new settings will have the improvements of enforcing “dependencies” between the configured parent and child settings so that customers don’t configure a child setting without configuring the dependent parent setting correctly. Hope this helps! ^IH

  • Amarjeet5's avatar
    Amarjeet5
    Iron Contributor
    Feb 23, 2022

    ishaqhotait 

     

    Looks like parent settings are in the ADMX help files for the settings. For example the Excel 

    Disable Trust Bar Notification for unsigned application add-ins and block them (User)

    This policy setting only applies if you enable the "Require that application add-ins are signed by Trusted Publisher" policy setting, which prevents users from changing this policy setting.

     

     

  • SLR_S's avatar
    SLR_S
    Icon for Microsoft rankMicrosoft
    Jul 27, 2023

    Hi, Is there any updated version to the above table or any other reference where the new settings can be checked?

    Also, will the settings marked as 'deprecated' be removed from Intune at a later point of time? I see customers using these settings and they are applied successfully. Is this a good practice?