Restrict email to Outlook desktop client on Windows 10 using Intune MDM?

%3CLINGO-SUB%20id%3D%22lingo-sub-77919%22%20slang%3D%22en-US%22%3ERestrict%20email%20to%20Outlook%20desktop%20client%20on%20Windows%2010%20using%20Intune%20MDM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-77919%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20restrict%20Exchange%20Online%20access%20to%20the%20Outlook%20desktop%20client%20and%20prevent%20the%20use%20of%20the%20Windows%20Mail%20client%20using%20Intune%20MDM%3F%20I%20am%20aware%20that%20this%20can%20be%20achieved%20fairly%20easily%20for%20iOS%20and%20Android%20devices%20but%20do%20not%20see%20a%20path%20for%20Windows%2010%20dekstops.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThx.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-77919%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-84676%22%20slang%3D%22en-US%22%3ERe%3A%20Restrict%20email%20to%20Outlook%20desktop%20client%20on%20Windows%2010%20using%20Intune%20MDM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-84676%22%20slang%3D%22en-US%22%3EThanks%2C%20that%20is%20good%20to%20know%2C%20Customers%20always%20come%20up%20with%20requirements%20that%20require%20additional%20work%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-84666%22%20slang%3D%22en-US%22%3ERe%3A%20Restrict%20email%20to%20Outlook%20desktop%20client%20on%20Windows%2010%20using%20Intune%20MDM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-84666%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20a%20customer%20requirement.%20They%20want%20to%20standardize%20on%20Outlook%202016%20across%20the%20board%20and%20prevent%20the%20use%20of%20Windows%20Mail.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20since%20found%20that%20I%20can%20use%20Windows%20Information%20Protection%20(WIP)%20policy%20by%20specifying%20allowed%20apps%20-%20for%20this%20as%20well.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThx.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-84665%22%20slang%3D%22en-US%22%3ERe%3A%20Restrict%20email%20to%20Outlook%20desktop%20client%20on%20Windows%2010%20using%20Intune%20MDM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-84665%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20curious%2C%20what%20concerns%20you%20about%20the%20Windows%20Mail%20application%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80210%22%20slang%3D%22en-US%22%3ERe%3A%20Restrict%20email%20to%20Outlook%20desktop%20client%20on%20Windows%2010%20using%20Intune%20MDM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80210%22%20slang%3D%22en-US%22%3E%3CP%3EWhile%20I%20did%20find%20a%20GPO%20to%20disable%20Windows%20Mail%2C%20upon%20testing%20it%2C%20however%2C%20it%20did%20not%20disable%20it.%20I%20decided%20to%20use%20PowerShell%20to%20uninstall%20the%20app%2C%20create%20an%20msi%2C%20and%20push%20that%20via%20Intune.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInterested%20in%20hearing%20other%20ways%20to%20accomplish%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThx.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Is it possible to restrict Exchange Online access to the Outlook desktop client and prevent the use of the Windows Mail client using Intune MDM? I am aware that this can be achieved fairly easily for iOS and Android devices but do not see a path for Windows 10 dekstops.

 

Thx.

4 Replies
Highlighted

While I did find a GPO to disable Windows Mail, upon testing it, however, it did not disable it. I decided to use PowerShell to uninstall the app, create an msi, and push that via Intune.

 

Interested in hearing other ways to accomplish this.

 

Thx.

Highlighted

I'm curious, what concerns you about the Windows Mail application?

Highlighted

It's a customer requirement. They want to standardize on Outlook 2016 across the board and prevent the use of Windows Mail.

 

I've since found that I can use Windows Information Protection (WIP) policy by specifying allowed apps - for this as well.

 

Thx.

Highlighted
Thanks, that is good to know, Customers always come up with requirements that require additional work :)