9,664 questions
The setting that causes this is "Internet Explorer Security zones: use only machine settings" and like Pavel suggested it needs to be set to Disabled for it to work
Adding gmail to Outlook gives Allow button gray out if Security Baseline is targeted
Pavel yannara Mirochnitchenko
13,336
Reputation points MVP
When MS Security Baseline is targeted in Intune for Windows 10 workstations with O365, users can't add Gmail accounts there because the Allow button on permissions is gray out. I tested, that the area which affects this, is IE settings in Baseline which are tighted up. If I set all IE settings to not configured, gmail account is addable. The challenge is that I have no clue, what settings specificly makes this unwante behavior happen. I tried to change some Block/Deny settings to Promt, but it didn't help me.
Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Intune | Configuration
2,094 questions
Microsoft Security | Intune | Other
5,570 questions
{count} votes
-
Jeredt Remling 1 Reputation point2022-03-08T19:51:18.297+00:00 @Pavel yannara Mirochnitchenko I've come across this exact same issue. Were you able to identify the I.E. setting(s) or implement a more permanent solution without turning off all the I.E. baselines settings?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 13%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWL%3C/text%3E%3C/svg%3E)
Wilson Lam 1 Reputation point2023-04-03T13:00:14.67+00:00 I have the same issue, I also want to know how to solve this problem. Anyone know which setting make the allow button greyed out?
-
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2023-04-03T14:57:19.27+00:00 @Anonymous I haven't pin-poined this issue to a specific setting, so I had temperarely to disable all IE settings in baseline. I remember there was Google's article about same issue (not including baselines) and it was explained something to do with authorization, but I didn't put any efford to it anymore.
-
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2023-04-03T15:00:59.3333333+00:00 But hey one hint - if you set any settings in Baseline from Enable to Not Configured, there will be no actual change. You need set it to opposite, disabled. Keep this in mind while testing.
-
Leon Ashton-Leatherland 80 Reputation points2023-12-12T14:54:23.56+00:00 Has anyone gone through the pain of finding this yet, before I start to go down the rabbit hole?! 😂🤣
Sign in to comment
Accepted answer
-
Leon Ashton-Leatherland 80 Reputation points
2023-12-12T16:26:06.25+00:00 -
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2023-12-14T18:27:56.42+00:00 Nice! I got this working after your hint use only machine settings. It works now, thanks.
Sign in to comment -
2 additional answers
Sort by: Most helpful
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator2021-11-16T16:51:53.867+00:00 Just to validate, this is in a dialog that Outlook is popping up, correct, and not an IE browser window?
-
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2021-11-16T18:58:59.613+00:00 I believe, this dialog which comes through Outlook profile creation wizard, is somehow based on IE functions, so I think it is IE frame doing this activity. And like I wrote in the discription, if I set all IE settings in sec baseline to "Not Configured", Outlook profile creation to gmail WILL work :)
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator
2021-11-30T14:32:09.41+00:00 Thus, working on the assumption that this is indeed what is going on, this will ultimately be a trial and error process to determine which setting exactly within the IE configurations needs to be changed. I've had to do this before and its certainly no fun, but I doubt anyone will be able to tell you exactly which setting is the culprit here.
-
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2021-11-30T17:13:31.943+00:00 Yep, I am afraid you are correct. There is A LOT of IE settings in the base line. Also I see some other conflict after applying ASR rules and even when reverting settings, the conflict does not end. Not sure, is the Security Baseline technique very bullet proof in Intune to work with at all. The engine seems still be little buggy.
Sign in to comment -
-
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP
2021-11-24T08:13:45.807+00:00 Pulling this up....