Forum Discussion
drogu-kangaroo
May 22, 2023Copper Contributor
New Outlook opens security hole
Hello, We just tested the New Outlook and discovered that it allows users to add personal Gmail accounts to their Outlook profile. We have intentionally blocked 3rd party email services to prevent d...
RobYoung
Iron Contributor
Just an update, I performed the following test again and it did work:
Create a test owa policy using powershell:
New-OwaMailboxPolicy TestOWAPolicy
Then I disabled personal accounts:
Set-OwaMailboxPolicy -PersonalAccountsEnabled -$false -identity TestOWAPolicy
Then I applied the policy to a test user:
Set-CASMailbox <email address removed for privacy reasons> -OwaMailboxPolicy TestOWAPolicy
I then tried to add my personal mailbox to my outlook. It goes through the motions and just as it is about to sync, I get this: