Outlook - Restrict installtion of add-in's

%3CLINGO-SUB%20id%3D%22lingo-sub-651852%22%20slang%3D%22en-US%22%3EOutlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-651852%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20having%20issues%20in%20trying%20to%20restrict%20installation%20of%20Outlook%20add-in's%20to%20admin%20approved%20%2F%20deployed%20only.%20I%20do%20not%20want%20end%20users%20installing%20their%20own%20from%20the%20store.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20used%20EAC%20and%20removed%20all%20three%20permissions%20from%20the%20default%20role%20assignment%20policy%2C%20but%20they%20can%20still%20install%20their%20own%20ads-in's%20via%20OWA.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116235i79BE322CEFF8803E%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20alt%3D%22Untitled.png%22%20title%3D%22Untitled.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EOutlook%20desktop%20and%20Outlook%20mobile%20seems%20to%20block%20the%20use%20of%20add-in's%20when%20this%20policy%20is%20changed%2C%20but%20OWA%20ignores%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20225px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116236iD45B33DD19AAE7D7%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%2220190528_114911000_iOS.png%22%20title%3D%2220190528_114911000_iOS.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20937px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116237i6D18EB125F4D18B9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Untitled2.png%22%20title%3D%22Untitled2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-651852%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-652652%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-652652%22%20slang%3D%22en-US%22%3E%3CP%3EDid%20you%20try%20both%20the%20old%20and%20new%20OWA%20experience%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-652669%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-652669%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F241531%22%20target%3D%22_blank%22%3E%40Anthony%20Russell%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20you%20try%20the%20steps%20given%20in%20the%20below%20article%20under%20-%26nbsp%3B%3CSPAN%3EPrevent%20add-in%20downloads%20by%20turning%20off%20the%20Office%20Store%20across%20all%20clients%20(Except%20Outlook)%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fmanage%2Fmanage-deployment-of-add-ins%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fmanage%2Fmanage-deployment-of-add-ins%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERobin%20Nishad%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-654529%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-654529%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3EYes.%20We%20are%20still%20able%20to%20add%20them%20on%20both.%20On%20the%20old%20OWA%20experience%2C%20the%20option%20to%20add%20them%20is%20missing%20in%20Options%2FGeneral%2FManage%20add%20ins%2C%20but%20when%20you%20click%20the%20settings%20cog%20on%20top%20right%2C%20you%20get%20an%20option%20there%20that%20shows%20'Manage%20add-ins'.%20This%20brings%20up%20the%20new%20experience.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20308px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116409i1207A7C46DBC6B7F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Untitled.png%22%20title%3D%22Untitled.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-654538%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-654538%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F165275%22%20target%3D%22_blank%22%3E%40Robin%20Nishad%3C%2FA%3EYes%2C%20but%20as%20it%20states%2C%20it%20turns%20them%20off%20for%20across%20all%20clients%20except%20Outlook.%20And%20we%20want%20to%20turn%20it%20off%20in%20Outlook.%20So%20I%20followed%20the%20other%20process%20for%20Outlook%20and%20it%20still%20doesn't%20work.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Fadd-ins-for-outlook%2Fspecify-who-can-install-and-manage-add-ins%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Fadd-ins-for-outlook%2Fspecify-who-can-install-and-manage-add-ins%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-657430%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-657430%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20been%20playing%20with%20this%20and%20so%20far%20I'm%20having%20no%20luck%20either.%20I'll%20give%20it%20some%20more%20time%20to%20make%20sure%20the%20role%20changes%20have%20propagated%20and%20will%20probe%20the%20Exchange%20folks%20if%20it's%20still%20not%20working.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-657539%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-657539%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20Vasil.%20We%20left%20it%20for%20over%20five%20days%20and%20it's%20still%20the%20same.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20now%20need%20to%20figure%20out%20how%20to%20remove%20the%20add-in's%20that%20have%20been%20added%20by%20the%20users%20since%20it%20stopped%20working.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-658597%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-658597%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20luck%2C%20so%20I'd%20agree%20that%20it's%20broken.%20Open%20a%20support%20ticket%20and%20report%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20for%20managing%20already%20installed%20apps%2C%20Get-App%2FRemove-App%20should%20do%20the%20trick.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-677079%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-677079%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20why%20I%20don't%20bother%20raising%20support%20tickets.%20This%20is%20the%20reply%20we%20got%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22So%20after%20further%20research%2C%20there%20is%20no%20way%20to%20restrict%20a%20user%20from%20downloading%20Outlook%20add%20in's%20from%20OWA.%26nbsp%3B%20This%20is%20an%20ongoing%20issue%2C%20but%20I%20cannot%20find%20any%20answer%20online%20as%20to%20when%20this%20feature%20will%20be%20worked%20on.%26nbsp%3B%20you%20can%20create%20a%20user%20voice%20on%20the%20subject%20and%20vote%20on%20it.%26nbsp%3B%20Right%20now%20this%20is%20all%20that%20I%20have%20been%20able%20to%20find.%20%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThey%20seem%20to%20think%20this%20is%20a%20requested%20feature%20and%20not%20actually%20a%20broken%20one!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-677990%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-677990%22%20slang%3D%22en-US%22%3E%3CP%3EWell%20I%20haven't%20gotten%20any%20reply%20yet%2C%20but%20sent%20a%20reminder...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-851493%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20Restrict%20installtion%20of%20add-in's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-851493%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20you%20get%20a%20reply%20please%3F%26nbsp%3B%3C%2FP%3E%3CP%3EI%20wanna%20apply%20the%20same%20thing%20and%20we%20still%20have%20the%20problem%20in%20OWA.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I'm having issues in trying to restrict installation of Outlook add-in's to admin approved / deployed only. I do not want end users installing their own from the store.

 

I have used EAC and removed all three permissions from the default role assignment policy, but they can still install their own ads-in's via OWA.

 

Untitled.png

Outlook desktop and Outlook mobile seems to block the use of add-in's when this policy is changed, but OWA ignores it.

 

20190528_114911000_iOS.png

 

Untitled2.png

 

Any idea?

10 Replies
Highlighted

Did you try both the old and new OWA experience?

Highlighted

@Anthony Russell 

 

Did you try the steps given in the below article under - Prevent add-in downloads by turning off the Office Store across all clients (Except Outlook)

 

https://docs.microsoft.com/en-us/office365/admin/manage/manage-deployment-of-add-ins?view=o365-world...

 

Thanks

 

Robin Nishad

Highlighted

@Vasil MichevYes. We are still able to add them on both. On the old OWA experience, the option to add them is missing in Options/General/Manage add ins, but when you click the settings cog on top right, you get an option there that shows 'Manage add-ins'. This brings up the new experience.

 

Untitled.png

Highlighted

@Robin NishadYes, but as it states, it turns them off for across all clients except Outlook. And we want to turn it off in Outlook. So I followed the other process for Outlook and it still doesn't work.

 

https://docs.microsoft.com/en-gb/exchange/clients-and-mobile-in-exchange-online/add-ins-for-outlook/...

 

Highlighted

I've been playing with this and so far I'm having no luck either. I'll give it some more time to make sure the role changes have propagated and will probe the Exchange folks if it's still not working.

Highlighted

@Vasil Michev 

 

Thank you Vasil. We left it for over five days and it's still the same.

 

I also now need to figure out how to remove the add-in's that have been added by the users since it stopped working.

Highlighted

No luck, so I'd agree that it's broken. Open a support ticket and report it.

 

As for managing already installed apps, Get-App/Remove-App should do the trick.

Highlighted

@Vasil Michev 

 

This is why I don't bother raising support tickets. This is the reply we got:

 

"So after further research, there is no way to restrict a user from downloading Outlook add in's from OWA.  This is an ongoing issue, but I cannot find any answer online as to when this feature will be worked on.  you can create a user voice on the subject and vote on it.  Right now this is all that I have been able to find. "

 

They seem to think this is a requested feature and not actually a broken one!!

Highlighted

Well I haven't gotten any reply yet, but sent a reminder...

Highlighted

Hello @Vasil Michev 

Did you get a reply please? 

I wanna apply the same thing and we still have the problem in OWA.