GPO "Block Signing into Office" does not working anymore

Noc noc 1 Reputation point
2021-06-07T10:46:29.09+00:00

Hello,

we have our own on-premise exchange infrastructure and need to prevent using o365 accounts in Office / Outlook 2016.

Therefore we have configured the follow GPO "Block Signing into Office" with "None allowed". That had worked for the last times.

Since view weeks, it does not works anymore and every user can add a third-party O365 account to our Office suite.
The GPO are applied and the reg value are correct.

103025-image.png

Are there any known changes by MS in Windows, Office or GPOs that have changed the behavior?
What can I do, to block the O365 cloud features on my devices?

We are running Windows 10 Enterprise v1809 and Office 2016.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,740 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,846 questions
Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
4,885 questions
0 comments

14 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vicky Wang 2,646 Reputation points
    2021-06-08T09:38:34.057+00:00

    Did the user not log in to the account or not activate Office before using the “Block Signing into Office” policy?
    I suspect if apply it to a computer that has not yet had Office activated, it causes user cannot login to activate Office. I have also tested this policy on my computer and I have activated my Office 365. For example, I choose “None allowed” and click OK.
    103356-capture2.png
    Then OneDrive is removed from “Save As” option and Office is still active

    103374-capture1.png

    If this isn’t help, you can try disable could features through the following registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet

    DWORD: UseOnlineContent

    Value: o

    Hope it works.

    Regards,

    Vicky

    0 comments
  2. Noc noc 1 Reputation point
    2021-06-08T11:34:01.533+00:00

    Thanks for your reply, unfortunately it does not help.
    I have also try the follow both keys with no luck.

    HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\
    DWORD: UseOnlineContent
    Value: 0

    HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity\
    DWORD: EnableADAL
    Value: 0

    Are there any changes during Windows Updates or Office Updates which ignore this configurations?
    before , our members got a popup, that the feature has been disabled by sysadmin.

    The current behavior is very bad. The ignore of the gpo settings will fail our security policies.

    0 comments
  3. Vicky Wang 2,646 Reputation points
    2021-06-09T08:54:06.77+00:00

    Hi，
    Before answering your question, I would like to confirm some information with you
    Is your GPO application successful? You can share a screenshot of whether the application is successful or not to us.
    We specify the next solution based on the results.
    Hope this information can help you
    Best wishes
    Vicky

    0 comments
  4. Noc noc 1 Reputation point
    2021-06-09T09:09:24.197+00:00

    GPO's applied successful.

    103794-image.png

    103812-image.png

    0 comments
  5. Vicky Wang 2,646 Reputation points
    2021-06-10T09:00:49.423+00:00

    Hi,

    If your GPO has been successfully applied, then the current problem should not be within the scope of AD knowledge.

    According to my understanding, you can contact the o365 team now, this seems to be a problem with o365.

    You can post in the corresponding team or change the tag.

    Hope this information can help you

    Best wishes

    Vicky

    0 comments