This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
When MS Security Baseline is targeted in Intune for Windows 10 workstations with O365, users can't add Gmail accounts there because the Allow button on permissions is gray out. I tested, that the area which affects this, is IE settings in Baseline which are tighted up. If I set all IE settings to not configured, gmail account is addable. The challenge is that I have no clue, what settings specificly makes this unwante behavior happen. I tried to change some Block/Deny settings to Promt, but it didn't help me.
@Pavel yannara Mirochnitchenko I've come across this exact same issue. Were you able to identify the I.E. setting(s) or implement a more permanent solution without turning off all the I.E. baselines settings?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 13%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWL%3C/text%3E%3C/svg%3E)
I have the same issue, I also want to know how to solve this problem. Anyone know which setting make the allow button greyed out?
@Anonymous I haven't pin-poined this issue to a specific setting, so I had temperarely to disable all IE settings in baseline. I remember there was Google's article about same issue (not including baselines) and it was explained something to do with authorization, but I didn't put any efford to it anymore.
But hey one hint - if you set any settings in Baseline from Enable to Not Configured, there will be no actual change. You need set it to opposite, disabled. Keep this in mind while testing.
Has anyone gone through the pain of finding this yet, before I start to go down the rabbit hole?! 😂🤣
The setting that causes this is "Internet Explorer Security zones: use only machine settings" and like Pavel suggested it needs to be set to Disabled for it to work
Nice! I got this working after your hint use only machine settings. It works now, thanks.
Just to validate, this is in a dialog that Outlook is popping up, correct, and not an IE browser window?
I believe, this dialog which comes through Outlook profile creation wizard, is somehow based on IE functions, so I think it is IE frame doing this activity. And like I wrote in the discription, if I set all IE settings in sec baseline to "Not Configured", Outlook profile creation to gmail WILL work :)
Thus, working on the assumption that this is indeed what is going on, this will ultimately be a trial and error process to determine which setting exactly within the IE configurations needs to be changed. I've had to do this before and its certainly no fun, but I doubt anyone will be able to tell you exactly which setting is the culprit here.
Yep, I am afraid you are correct. There is A LOT of IE settings in the base line. Also I see some other conflict after applying ASR rules and even when reverting settings, the conflict does not end. Not sure, is the Security Baseline technique very bullet proof in Intune to work with at all. The engine seems still be little buggy.
Pulling this up....