Problem
Consider the following scenario:
- Ivanti Workspace Control 10.2.500.1 or later is used.
- E-mail Settings are configured for Microsoft Outlook.
- The following Outlook policy is set:
- Prevent users from adding e-mail account types > Prevent users from adding Exchange e-mail accounts
- Outlook is started within a Workspace Control managed session.
In this scenario, the first-run wizard of Outlook is started, instead of Outlook being configured by E-mail Settings.
Note: Configuring Outlook for Exchange through the first-run wizard will not be possible. Because of the conifigured policy, the blocked option will be grayed out.
Cause
In older versions of Workspace Control, APIs were used to create the E-mail Profile directly. This profile was based on the Exchange protocol RPC over HTTP.
With the introduction of Exchange 2016, the default protocol for Exchange was changed to MAPI over HTTP.
Microsoft no longer supports the use of APIs to create the E-mail Profile directly so a change was made to use the Microsoft way of creating the profile by using AutoDiscover.
This means that the E-mail Profile is created by the user itself. The policy blocks this behaviour.
Solution
Disable the Outlook policy:
- Prevent users from adding e-mail account types > Prevent users from adding Exchange e-mail accounts
Notes:
- The policy Prevent users from adding e-mail account types can still be used to block other types of e-mail accounts.
- From Ivanti Workspace Control 10.3.10.0 or higher, the following will be displayed in the User Event Log when the policy for Exchange is detected:
The Microsoft Outlook policy 'Prevent users from adding Exchange e-mail accounts' conflicts with AutoDiscover => Remove it to work with Email Settings
- Microsoft Outlook 2016 now requires AutoDiscover to be configured, or it will be unable to connect to Exchange Server. This makes AutoDiscover a required feature.
Source: Planning considerations for deploying Outlook 2016 for Windows | Microsoft Docs
Warning:
- In 10.3.10.0 the warning in the User Event Log is displayed for every user, regardless of setting the policy.
- Another effect is that the E-mail Profile is created with the name Outlook, instead of the name of the E-mail Setting in the Workspace Control Console.
- Both issues have been corrected in 10.3.20.0 as decribed in The warning message 'Prevent users from adding Exchange e-mail accounts' is displayed erroneously.
Comments