Microsoft Office 2016 Microsoft Office 2016 16.0.5399.1000 Rely on CSS for font formatting This policy setting allows you to rely on CSS for font formatting. If you enable this policy setting, you may select configure these options: - Enforce CSS: If checked, enforce CSS is on. If not checked, enforce CSS is off. - CSS setting for Word: If checked, the CSS setting for Word as an email editor is used. If you disable or do not configure this policy setting, the options will not be configured. Trust Center Path: Date: Description: Allow sub folders: Certificate Hash: Escrow Key #1 Escrow Key #2 Escrow Key #3 Escrow Key #4 Escrow Key #5 Escrow Key #6 Escrow Key #7 Escrow Key #8 Escrow Key #9 Escrow Key #10 Escrow Key #11 Escrow Key #12 Escrow Key #13 Escrow Key #14 Escrow Key #15 Escrow Key #16 Escrow Key #17 Escrow Key #18 Escrow Key #19 Escrow Key #20 Trusted Location #1 Trusted Location #2 Trusted Location #3 Trusted Location #4 Trusted Location #5 Trusted Location #6 Trusted Location #7 Trusted Location #8 Trusted Location #9 Trusted Location #10 Trusted Location #11 Trusted Location #12 Trusted Location #13 Trusted Location #14 Trusted Location #15 Trusted Location #16 Trusted Location #17 Trusted Location #18 Trusted Location #19 Trusted Location #20 Unsafe Location #1 Unsafe Location #2 Unsafe Location #3 Unsafe Location #4 Unsafe Location #5 Unsafe Location #6 Unsafe Location #7 Unsafe Location #8 Unsafe Location #9 Unsafe Location #10 Unsafe Location #11 Unsafe Location #12 Unsafe Location #13 Unsafe Location #14 Unsafe Location #15 Unsafe Location #16 Unsafe Location #17 Unsafe Location #18 Unsafe Location #19 Unsafe Location #20 Afrikaans Alsatian Albanian Amharic Arabic Arabic (Algeria) Arabic (Bahrain) Arabic (Egypt) Arabic (Iraq) Arabic (Jordan) Arabic (Kuwait) Arabic (Lebanon) Arabic (Libya) Arabic (Morocco) Arabic (Oman) Arabic (Qatar) Arabic (Saudi Arabia) Arabic (Syria) Arabic (Tunisia) Arabic (U.A.E.) Arabic (Yemen) Armenian Armenian (Armenia) Assamese Assamese (India) Azerbaijani (Cyrillic) Azerbaijani (Latin) Bangla (Bangladesh) Bangla (India) Bashkir Basque Belarusian Bosnian (Cyrillic, Bosnia and Herzegovina) Bosnian (Latin, Bosnia and Herzegovina) Breton Bulgarian Burmese Catalan Central Kurdish (Iraq) Cherokee Chinese (Simplified) Chinese (Traditional) Chinese (China) Chinese (Hong Kong S.A.R.) Chinese (Macao S.A.R.) Chinese (Singapore) Chinese (Taiwan) Corsican Croatian Croatian (Bosnia and Herzegovina) Croatian (Croatia) Czech Danish Dari Divehi Dutch Dutch (Belgium) Dutch (Netherlands) Edo English (Australia) English (Belize) English (Canada) English (Caribbean) English (Hong Kong S.A.R.) English (India) English (Indonesia) English (Ireland) English (Jamaica) English (Malaysia) English (New Zealand) English (Philippines) English (Singapore) English (South Africa) English (Trinidad and Tobago) English (U.K.) English (U.S.) English (Zimbabwe) Estonian Faeroese Filipino Finnish French French (Belgium) French (Cameroon) French (Canada) French (Caribbean) French (Congo (DRC)) French (Côte d'Ivoire) French (France) French (Haiti) French (Luxembourg) French (Mali) French (Monaco) French (Morocco) French (Reunion) French (Senegal) French (Switzerland) Western Frisian Western Frisian (Netherlands) Fulfulde Irish Scottish Gaelic (United Kingdom) Galician Georgian German (Austria) German (Germany) German (Liechtenstein) German (Luxembourg) German (Switzerland) German Greek Greenlandic Guarani Gujarati Hausa (Latin) Hawaiian Hebrew Hebrew (Israel) Hindi Hungarian Ibibio Icelandic Igbo Indonesian Inuktitut (Latin) Inuktitut (Syllabics) Irish (Ireland) Italian Italian (Italy) Italian (Switzerland) Japanese Kannada Kanuri Kashmiri Kashmiri (Arabic) Kashmiri (Devanagari) Kazakh K'iche Kinyarwanda Khmer Konkani Korean Kyrgyz Lao Latin Latvian Lithuanian Lower Sorbian Luxembourgish (Luxembourg) Macedonian Malay (Brunei) Malay (Malaysia) Malayalam Maltese Manipuri Maori Mapudungun Marathi Mohawk Mongolian (Cyrillic) Mongolian (Traditional Mongolian) Nepali Nepali (India) Nepali (Nepal) Norwegian (Bokmål) Norwegian (Nynorsk) Occitan Odia Oromo Papiamento Pashto Persian Polish Portuguese (Brazil) Portuguese (Portugal) Punjabi Punjabi (Pakistan) Quechua (Bolivia) Quechua (Ecuador) Quechua (Peru) Romanian Romanian (Moldova) Romanian (Romania) Romansh (Switzerland) Russian Russian (Moldova) Russian (Russia) Sami, Northern (Finland) Sami, Northern (Norway) Sami, Northern (Sweden) Sami, Southern (Norway) Sami, Southern (Sweden) Sami, Lule (Norway) Sami, Lule (Sweden) Sami, Inari (Finland) Sami, Skolt (Finland) Sanskrit Serbian (Latin) Serbian (Cyrillic) Serbian (Cyrillic, Bosnia and Herzegovina) Serbian (Latin, Bosnia and Herzegovina) Serbian (Cyrillic, Serbia and Montenegro (Former)) Serbian (Cyrillic, Serbia) Serbian (Cyrillic, Montenegro) Serbian (Latin, Serbia and Montenegro (Former)) Serbian (Latin, Serbia) Serbian (Latin, Montenegro) Sesotho Sesotho sa Leboa Setswana Sindhi (India) Sindhi (Pakistan) Sindhi (Devanagari) Sindhi (Arabic) Sinhala Slovak Slovenian Somali Spanish Spanish (Argentina) Spanish (Bolivia) Spanish (Chile) Spanish (Colombia) Spanish (Costa Rica) Spanish (Dominican Republic) Spanish (Ecuador) Spanish (El Salvador) Spanish (Guatemala) Spanish (Honduras) Spanish (Mexico) Spanish (Nicaragua) Spanish (Panama) Spanish (Paraguay) Spanish (Peru) Spanish (Puerto Rico) Spanish (Spain) Spanish (United States) Spanish (Uruguay) Spanish (Venezuela) Swahili Swedish Swedish (Finland) Swedish (Sweden) Syriac Tajik Central Atlas Tamazight (Arabic) Central Atlas Tamazight (Latin) Central Atlas Tamazight (Latin, Algeria) Central Atlas Tamazight (Arabic, Morocco) Tamil Tatar Telugu Thai Tibetan (China) Tigrinya (Eritrea) Tigrinya (Ethiopia) Turkish Turkmen Uyghur (China) Ukrainian Upper Sorbian Urdu Uzbek (Cyrillic) Uzbek (Latin) Valencian Venda Vietnamese Welsh Wolof Xitsonga isiXhosa Sakha Yi (China) Yiddish Yoruba isiZulu Checks/Unchecks the corresponding UI option. Checks/Unchecks the corresponding UI option. This option only applies to CommandBars UI. This policy setting controls whether users can edit and save Office 2016 documents on Web servers that they have opened using Internet Explorer. If enable this policy setting, when users browse to an Office 2016 document on a Web server using Internet Explorer the appropriate application opens the file in read/write mode. If you disable or do not configure this policy setting, when users browse to an Office 2016 document on a Web server using Internet Explorer, the appropriate application opens the file in read-only mode. Customizable Error Messages Disable Items in User Interface Enter error ID for Value Name and custom button text for Value General Ignore words in UPPERCASE Ignore words with numbers List of error messages to customize Miscellaneous First Run DLP Disable Opt-in Wizard on first run This policy setting controls whether users see the Opt-in Wizard the first time they run a Microsoft Office 2016 application. If you enable this policy setting, the Opt-in Wizard does not display the first time users run an Office 2016 application. If you disable or do not configure this policy setting, the Opt-in Wizard displays the first time users run a Microsoft Office 2016 application, which allows them to opt into Internet--based services that will help improve their Office experience, such as Microsoft Update, the Customer Experience Improvement Program, Office Diagnostics, and Online Help. Graphic filter legacy mode Controls code path used by legacy GIF/PNG/JPEG filters. The default is to use the GDI+ codecs for these image types. For a compatibility mode to previous versions of Office which will use the legacy filter code, enable this policy. Do not validate printers before using them This policy setting allows you to determine whether Word, PowerPoint, or Excel validates its connection with a printer before attempting to use it in the Print tab in Backstage View. If you enable this policy setting, Word, PowerPoint, and Excel do not validate printers before using them. If invalid data is returned from the printer, then Word, PowerPoint, and Excel still attempt to use the data, which can result in the application failing. If you disable or do not configure this policy setting, Word, PowerPoint, and Excel validate printers before using them in the Print tab in Backstage View. If validation fails, the printer is disabled. Suppress recommended settings dialog This policy setting controls the Recommended Settings dialog on first run of Office. If you enable this policy setting, the recommended settings dialog will not be displayed on first run of Office. If you disable or do not configure this policy setting, the recommended settings will provide choices to the user to opt into services such as such as Microsoft Update, new software notifications, Customer Experience Improvement Program, Office Diagnostics (Automatically receive small updates to improve reliability) Online Help (Online content options) and Online Search Relevancy that will help improve their Office experience. Do not use hardware graphics acceleration This policy setting allows you to not use hardware graphics acceleration. If you enable this policy setting, hardware graphics acceleration will not be used. If you disable or do not configure this policy setting hardware graphics acceleration may be used. Graphics filter import This policy setting allows you to specify a list of graphic filters that 2016 Office applications load. If you enable this policy setting, you can specify a list of graphic filters that 2016 Office applications load. The graphic filters you specify must be assigned a string value FILTER.FLT (where FILTER.FLT is replaced with the name of a real filter), the value of which is XX.YY.ZZ.WW, where XX, YY, ZZ, and WW are each positive numbers less than 2^16, where the version in the registry is less than or equal to the version of the filter. For example: ''myfilter.flt''=''2006.1200.1000.1000'' If you disable or do not configure this policy setting, 2016 Office applications does not restrict any graphics filters from loading. Disable 3D Model File Formats List This policy setting allows you to specify a list of 3D model file formats that will be blocked from being loaded in Office applications. If you enable this policy setting, you can specify a list of 3D Model file format that Office applications will block on insert or load. You should specify the list of 3D model file formats to block in a list of files extensions. For example, to block the FBX extension, enter the string “FBX”. To block the FBX and OBJ extensions, enter the string “FBX; OBJ”. If you disable or do not configure this policy setting, Office applications do not restrict any 3D model file formats. Office 2016 Converters Block opening of pre-release versions of file formats new to Excel 2016 through the Compatibility Pack for Office 2016 and Excel 2016 Converter This policy setting controls whether users with the Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2016 File Formats installed can open Office Open XML files saved with pre-release versions of Excel 2016. Excel Open XML files usually have the following extensions: .xlsx, .xlsm, .xltx, .xltm, .xlam. If you enable this policy setting, users of the Compatibility Pack will not be able to open Office Open XML files created in pre-release versions of Excel 2016. If you disable this policy setting, users with the Compatibility Pack installed can open files saved by some pre-release versions of Excel, but not by others, which can lead to inconsistent file opening functionality. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled. Block opening of pre-release versions of file formats new to PowerPoint 2016 through the Compatibility Pack for Office 2016 and PowerPoint 2016 Converter This policy setting controls whether users with the Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2016 File Formats installed can open Office Open XML files saved with pre-release versions of PowerPoint 2016. PowerPoint Open XML files usually have the following extensions: .pptx, .pptm, .potx, .potm, .ppsx, .ppsm, .ppam, .thmx, .xml. If you enable this policy setting, users of the Compatibility Pack will not be able to open Office Open XML files created in pre-release versions of PowerPoint 2016. If you disable this policy setting, users with the Compatibility Pack installed can open files saved by some pre-release versions of PowerPoint, but not by others, which can lead to inconsistent file opening functionality. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled All blogging disabled Only SharePoint blogs allowed Enabled This policy setting controls whether users can compose and post blog entries from Word. If you enable this policy setting, you can choose from three options for controlling blogging: * Enabled - Users may compose and post blog entries from Word to any available blog provider. This is the default configuration in Word. * Only SharePoint blogs allowed - Users can only post blog entries to SharePoint sites. * Disabled - The blogging feature in Word is disabled entirely. If you disable or do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled-Enabled. Control Blogging msaccess.exe onent.exe mse7.exe Picture Manager uses this registry entry to determine whether to launch the File Types association dialog box when Picture Manager is launched for the first time. Disable File Types association dialog box on first launch IE Security groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe Restrict ActiveX Install Restrict ActiveX Install Restrict File Download Restrict File Download Add-on Management Add-on Management Local Machine Zone Lockdown Security Consistent Mime Handling Mime Handling Mime Sniffing Safety Feature Mime Sniffing Object Caching Protection Object Caching Scripted Window Security Restrictions Window Restrictions Protection From Zone Elevation Zone Elevation Information Bar Local Machine Zone Lockdown Security Band Disable user name and password Disable user name and password Bind to object Safe to bind to object Saved from URL Saved from URL Navigate URL Block malformed navigation Block popups Block popups Adds locations, such as c:\Windows or \\server\share, to the list of approved locations for use with Restricted Browsing. When Restricted Browsing is active, the Save As dialog box is restricted such that the user can navigate only to the locations and the children of the locations specified in this list. To allow easier access to these approved locations, consider adding them to the Places bar by using the Places Bar Locations setting for the File Open/Save dialog box. If there are no approved locations in the Places bar, the dialog box may not be able to open. To activate Restricted Browsing, use the Restricted Browsing/Activate Restricted Browsing setting. Note: You must set this policy setting first before the "Activate Restricted Browsing". This policy setting controls whether macros can run in an Office 2016 application that is opened programmatically by another application. If you enable this policy setting, you can choose from three options for controlling macro behavior in Excel, PowerPoint, and Word when the application is opened programmatically: - Disable macros by default - All macros are disabled in the programmatically opened application. - Macros enabled (default) - Macros can run in the programmatically opened application. This option enforces the default configuration in Excel, PowerPoint, and Word. - User application macro security level - Macro functionality is determined by the setting in the "Macro Settings" section of the Trust Center. If you disable or do not configure this policy setting, when a separate program is used to launch Microsoft Excel, PowerPoint, or Word programmatically, any macros can run in the programmatically opened application without being blocked. Set password hash format as ISO-compliant This policy setting allows you create ISO-compliant modification password records. If you enable this policy setting, then passwords created will be ISO-compliant. If you disable or do not configure this policy setting, the default will be ECMA-style records. Encrypt document properties This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. If you enable this policy setting, the document properties will be encrypted. If you disable or do not configure this policy setting, the document properties will not be encrypted. Require OCSP at signature generation time This policy setting lets you determine whether Office 2016 requires OCSP (Online Certificate Status Protocol) revocation data for all digital certificates in a chain when digital signatures are generated. If you enable this policy setting, Office 2016 requires OCSP revocation data for all certificates in a chain when digital signatures are generated. If you disable or do not configure this policy setting, Office 2016 does not set any restrictions on what type of revocation data is to be used. Specify minimum XAdES level for digital signature generation This policy setting lets you specify a minimum XAdES level that Office 2016 applications must reach in order to create an XAdES digital signature. If unable to reach the minimum XAdESLevel, the Office application fails to create the signature. If you enable this policy setting, you can set the following minimum XAdES levels that must be met by the Office application before creating the digital signature. - No minimum level - XAdES-BES: Must create at least XAdES-BES or fail - XAdES-T: Must create at least XAdES-T (timestamp) or fail. - XAdES-C: Must create at least XAdES-C (certificate and revocation references) or fail. - XAdES-X: Must create at least XAdES-X (timestamp -C) or fail. - XAdES-X-L: Must create at least XAdES-X-L (store certificate and revocation values) or fail. If you disable or do not configure this policy setting, Office 2016 does not require a minimum XAdES level and creates the most advanced XAdES signature possible, up to the level specified in the policy setting No minimum level XAdES-BES XAdES-T XAdES-C XAdES-X XAdES-X-L Display alternative certificate providers This policy setting allows you to configure whether Office displays a link to get a certificate from a Microsoft partner when there are no usable signing certificates. If you enable this policy setting, the link won’t be displayed. If you disable or don’t configure this policy setting, the link is displayed. Check the XAdES portions of a digital signature This policy setting lets you specify whether or not Office 2016 checks the XAdES portions of a digital signature, if present, when validating a digital signature for a document. If you enable this policy setting, Office 2016 checks the XAdES portions of a digital signature when validating it. If you disable or do not configure this policy setting, Office 2016 only validates XML-DSig and XAdES-BES portions of a digital signature. Do not allow expired certificates when validating signatures This policy setting allows you to configure Office 2016 applications to accept expired digital certificates during verification of digital signatures. If you enable or do not configure this policy setting, Office 2016 applications display digital signatures created with expired certificates as invalid. If you disable this policy setting, Office 2016 applications treat expired certificates as valid. Select digital signature hashing algorithm This policy setting allows you to configure the hashing algorithm Office 2016 applications use to confirm digital signatures. If you enable this policy setting, you can specify any of the following SHA standard functions: - SHA1 - SHA256 - SHA384 - SHA512 If you disable or do not configure this policy setting, the default value of SHA1 is used. Configure legacy hashing algorithm This policy setting allows you to configure whether Office displays a digital signature as legacy when it contains specific hash algorithms. If you enable this policy setting, you can specify the weakest hash algorithm that Office treats as legacy. You can specify any of the following algorithms: - MD5 - SHA1 - SHA256 - SHA384 If you don’t configure this policy setting, Office treats digital signatures containing SHA1 or better as valid. For example, if you set SHA256 as the legacy hashing algorithm, Office treats SHA384 signatures as valid. Configure invalid hashing algorithm This policy setting allows you to configure whether Office displays a digital signature as invalid when it contains specific hash algorithms. If you enable this policy setting, you can specify the weakest hash algorithm that Office treats as invalid. If you enable this policy setting, you can specify any of the following algorithms: - MD5 - SHA1 - SHA256 - SHA384 If you don’t configure this policy setting, Office won’t treat digital signatures as invalid because of the hashing algorithm. For example, if you set MD5 as the invalid hashing algorithm Office treats MD5 signatures as invalid. MD5 SHA1 SHA256 SHA384 SHA512 0 512 768 1024 1536 2048 4096 Configure minimum RSA public key size This policy setting allows you to configure the minimum number of RSA public key bits Office allows to create digital signatures. If you enable this policy setting, you can specify the minimum number of bits that can be used to create a digital signature. For example: 1024, 2048, etc. If you disable or don’t configure this policy setting, Office allows all RSA keys, unless the legacy or invalid RSA policy settings are configured. If the legacy or invalid RSA public key bits policy settings are configured, then the default for this setting will be the next larger value. For example, if the number of RSA public key bits is set to 768, then this setting would default to 1024. Configure legacy RSA public key size This policy setting allows you to configure whether Office displays a digital signature as legacy because of the number of RSA public key bits used in the digital signature. If you enable this policy setting, you can specify the number of bits that Office treats as legacy in a digital signature. For example: 512, 768, etc. If you don’t configure this policy setting, Office won’t treat any digital signatures as legacy because of the number of bits in the public key. Enabling this policy causes the minimum RSA public key size to be the next largest option. Configure invalid RSA public key size This policy setting allows you to configure whether Office displays a digital signature as invalid because of the number of RSA public key bits used in the digital signature. If you enable this policy setting, you can specify the number of bits that Office treats as invalid in a digital signature. For example: 512, 768, etc. If you don’t configure this policy setting, Office won’t treat any digital signatures as invalid because of the number of bits in the public key. Enabling this policy causes the minimum RSA public key size to be the next largest option. Configure minimum DSA public key size This policy setting allows you to configure the minimum number of DSA public key bits Office allows to create digital signatures. If you enable this policy setting, you can specify the minimum number of bits that can be used to create a digital signature. For example: 1024, 2048, etc. If you disable or don’t configure this policy setting, Office allows all DSA keys, unless the legacy or invalid DSA policy settings are configured. If the legacy or invalid DSA public key bits policy settings are configured, then the default for this setting will be the next larger value. For example, if the number of DSA public key bits is set to 768, then this setting would default to 1024. Configure legacy DSA public key size This policy setting allows you to configure whether Office displays a digital signature as legacy because of the number of DSA public key bits used in the digital signature. If you enable this policy setting, you can specify the number of bits that Office treats as legacy in a digital signature. For example: 512, 768, etc. If you don’t configure this policy setting, Office won’t treat any digital signatures as legacy because of the number of bits in the public key. Enabling this policy causes the minimum DSA public key size to be the next largest option. Configure invalid DSA public key size This policy setting allows you to configure whether Office displays a digital signature as invalid because of the number of DSA public key bits used in the digital signature. If you enable this policy setting, you can specify the number of bits that Office treats as invalid in a digital signature. For example: 512, 768, etc. If you don’t configure this policy setting, Office won’t treat any digital signatures as invalid because of the number of bits in the public key. Enabling this policy causes the minimum DSA public key size to be the next largest option. Configure time stamping hashing algorithm This policy setting allows you to configure the time stamping hashing algorithm used by Office 2016 applications to validate a message or document. If you enable this policy setting, you can specify any of the following standard hashing algorithm (SHA) functions: - SHA1 - SHA256 - SHA384 - SHA512 If you disable or do not configure this policy setting, SHA1 will be used. SHA1 SHA256 SHA384 SHA512 Specify filtering for certificate issuers This policy setting allows you to configure Office to only allow certificates from a specific issuer when creating a digital signature. If you enable this policy setting, Office only displays certificates that contain the string you set in the policy. This setting is case-sensitive. For example, a setting of "MyCA" would match an issuer of "MyCA 1"and "MyCA 2", but not "MYCA 3". If you disable or don’t configure this setting, then signing certificates from any issuer can be used. Specify timestamp server name This policy setting allows you to set the HTTP URL for the timestamp server used by Office 2016 applications in the process of validating messages or documents. If you enable this policy setting, you must provide a valid HTTP URL address for the timestamp server. If you do disable or not configure this policy setting, a timestamp server will not be used. Set timestamp server timeout This policy setting allows you to configure the number of seconds Office 2016 applications wait for a response from the time stamping server before timing out. If timeout occurs, the Office 2016 application will not open the message or document. If you enable this policy setting, the number of seconds you specify will be the length of time Office 2016 will wait for the time stamping server to return a result. If you disable or do not configure this policy setting, the default of 5 seconds will be used. Set signature verification level This policy setting allows you to set the verification level used by Office 2016 applications when validating a digital signature. Note: Enabling this policy setting is not recommended for subscription versions of Office, such as Microsoft 365 Apps for enterprise, because it will use the legacy registry based rules settings (described below) instead of basing the verification level on the Office version that signed the file. If you enable this policy setting, you can set the verification level to any of the following: - No rules: Office 2016 digital signature rules are disabled. - Office 2007 rules: Office 2016 uses the Office 2007 digital signature rules. - Office 2010 rules: Office 2016 uses the Office 2010 digital signature rules. - Office 2013 rules: Office 2016 uses the Office 2013 digital signature rules. If you disable or do not configure this policy setting, subscription versions of Office 2016 use the rules of the Office version that was used to sign the document to validate the digital signature. No rules Office 2007 rules Office 2010 rules Office 2013 rules Requested XAdES level for signature generation This policy setting allows you to specify a requested or desired XAdES level in creating a digital signature. If you enable this policy setting, you may specify the XAdES level in creating a digital signature. If the desired XAdES level is not reached, the last highest XAdES level reached is used if the level is higher than the minimum XAdES level (XAdeES-BES). - No XAdES: XML-DSig - No XAdES - XAdES-BES: Minimal XAdES (Default) - XAdES-T: Will fall back to XAdES-BES if minimum XAdES level < XAdes-T - XAdES-C: Will fall back to XAdES-T if minimum XAdES level < XAdes-C - XAdES-X: Will fall back to XAdES-C if minimum XAdES level < XAdes-X - XAdES-X-L: Will fall back to XAdES-X if minimum XAdES level < XAdes-X-L If you disable or do not configure this policy setting, XAdES-BES will be used. No XAdES XAdES-BES XAdES-T XAdES-C XAdES-X XAdES-X-L Turn off PDF encryption setting UI This policy setting allows you to turn off the PDF encryption setting UI. If you enable this policy setting, the PDF encryption UI is hidden. If your organization has a higher requirement on encryption than what is supported, the recommendation is to enable this policy setting. If you disable or do not configure this policy setting, the PDF encryption UI is shown, and users may choose to encrypt the PDF file or not. Set minimum password length This setting will define what the minimum length a password should be when the local policy is enforced. If you enable this policy setting, you may specify the minimum password length. The valid range is between 0 and 255. If you disable or do not configure this policy setting, the default minimum password length is 0 characters. Set password rules level This policy setting allows you to set the password rules level. If you enable this policy setting, you may specify a password rules level: - No password checks: There are no complexity checks - Local length check: Minimum length checks - Local length and complexity checks: Minimum length checks plus 3 of 4 character groups checks. - Local length, local complexity, and domain policy checks: All the previous checks plus Windows domain password rules enforced. If you select "Local length and complexity checks" or "Local length, local complexity, and domain policy checks," then the password must contain characters from at least three of four character sets: lowercase a-z, uppercase A-Z, digits 0-9, or non-alphabetic characters. When this complexity is enforced, the minimum password length needs to be at least 6, but can be more depending on the value set in the "Set minimum password length" policy setting. If you select "Local length, local complexity, and domain policy checks," then Microsoft Office will use the Windows domain policy as well as all the settings "Local length and complexity checks." This allows a custom password filter that is installed for Windows passwords to be used. If you are offline or a domain controller cannot be contacted, then the Windows password settings are not used, and only the "Local length and complexity checks" settings are used. If you don’t have a custom password filter, then "Local length and complexity checks" saves a trip across the network and would be the best choice. If you disable or do not configure this policy setting, the behavior is the same as if this policy setting were enabled and "No password checks" selected. No password checks Local length check Local length and complexity checks Local length, local complexity, and domain policy checks Set password rules domain timeout This policy setting will define how long in milliseconds to wait when contacting a domain controller before timing out. This requires the "Set password rules level" to be enabled and set to "Local length, local complexity, and domain policy checks." If you enable this policy setting, you may set how long in milliseconds to wait when contacting a domain controller before timing out. If you disable or do not configure this policy setting, the default value of 4000 milliseconds is used. Turn off error reporting for files that fail file validation This policy determines whether error reports and files that fail file validation should be sent using the Watson dialog. If you enable this policy setting, users will not see the Watson dialog. Files that fail file validation will not be sent by the Watson dialog to Microsoft. If you disable or do not configure this policy setting, the Watson dialog to send files that fail validation will show up once every two weeks. This policy setting controls whether Office 2016 applications notify users when potentially unsafe features or content are detected, or whether such features or content are silently disabled without notification. The Message Bar in Office 2016 applications is used to identify security issues, such as unsigned macros or potentially unsafe add-ins. When such issues are detected, the application disables the unsafe feature or content and displays the Message Bar at the top of the active window. The Message Bar informs the users about the nature of the security issue and, in some cases, provides the users with an option to enable the potentially unsafe feature or content, which could harm the user's computer. If you enable this policy setting, Office 2016 applications do not display information in the Message Bar about potentially unsafe content that has been detected or has automatically been blocked. If you disable this policy setting, Office 2016 applications display information in the Message Bar about content that has automatically been blocked. If you do not configure this policy setting, if an Office 2016 application detects a security issue, the Message Bar is displayed. However, this configuration can be modified by users in the Trust Center. Prevent users from removing Application Guard protection on files. This policy setting allows you to control whether users can remove Application Guard protection and open a document with full trust in Office. If you enable this policy setting, users can continue to work with Office documents in Application Guard, however, they cannot remove protection and open a document outside Application Guard. If you disable or do not configure this policy settings, Office will by default allow users to remove protection and open a document with full trust. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Turn off camera and microphone access for Office apps using Application Guard. The policy allows you to control whether Office apps using Application Guard can access the user's camera and microphone if they're enabled on the user's device. Important: A compromised Application Guard container could bypass camera and microphone permissions and access the camera and microphone without the user’s knowledge. To prevent unauthorized access, we recommend that the camera and microphone be turned off on the user’s device when they aren’t needed. If you enable this policy setting, Office apps using Application Guard won't be able to access the camera and microphone on the user’s device. If you disable or don't configure this policy setting, Office apps using Application Guard will be able to access the camera and microphone on the user’s device. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Configure copy and paste from Office documents opened in Application Guard This policy setting allows you to control whether users can copy and paste content from Office to and from documents opened in Application Guard, as well as the allowed formats. This policy setting only applies to Word, Excel, and PowerPoint. If you enable this policy setting, you must choose from the following behaviors: - Enable clipboard functionality between the host and Application Guard (default). - Disable clipboard functionality completely between the host and Application Guard. - Enable the clipboard to copy content from Application Guard to the host. - Enable the clipboard to copy content from the host to Application Guard. Note: Application Guard only allows copying text and images and doesn’t allow copying of rich content. Important: We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device’s clipboard and its content. You can also choose the type of content that can be copied, by using the content options: - Allows text copying (default). - Allows image copying. - Allows both text and image copying. If you disable or don't configure this policy setting, users can copy and paste content to and from documents opened in Application Guard to other locations outside Application Guard. Note: Application Guard only allows copying text and images and doesn’t allow copying of rich content. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. AppGuardClipboardDirection Enable clipboard operation only from the host to the isolated session Enable clipboard operation only from an isolated session to the host Enable clipboard operation both directions (default) Disable clipboard operation both directions AppGuardClipboardType Enable only text operations in the clipboard (default). Enable only image operations in the clipboard. Enable image and text operations in the clipboard. Don't use Application Guard with Office. This policy setting allows you to control whether Office apps use Application Guard to isolate untrusted documents. If you enable this policy setting, Office apps won't use Application Guard to isolate untrusted documents even if the device is configured to use Application Guard. Instead, Office will use Protected View to isolate untrusted documents. Note: You should consider enabling this policy setting if you want to stop Office apps from using Application Guard without impacting the use of Application Guard with other applications. If you disable or don't configure this policy settings, Office apps will use Application Guard to isolate untrusted documents. The device must be configured to use Application Guard and the user must be licensed to use Application Guard. Disable hardware acceleration for Office in Application Guard This policy setting controls whether Office in Application Guard uses hardware or software acceleration to render graphics. If you enable this setting, Application Guard uses software-based (CPU) rendering and won’t load any third-party graphics drivers or interact with any connected graphics hardware. Important: Be aware that disabling or not configuring this policy setting with potentially compromised graphics devices or drivers might pose a risk to the user's device. If you disable or don't configure this setting, Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Application Guard, particularly for video playback and other graphics-intensive operations. If you disable or don't configure this setting without connecting any high-security rendering graphics hardware, Application Guard will automatically revert to software-based (CPU) rendering. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Turn off protection of unsupported file types in Application Guard for Office This policy setting controls whether Application Guard for Office will block unsupported file types from being opened in Office apps or if it will enable the redirection to Protected View. If you enable this setting, Application Guard for Office will redirect unsupported file types to Protected View in Office apps. Important: Be aware that enabling this policy setting might pose a risk to the user's device. If you disable or don't configure this setting, Application Guard for Office will block unsupported file types in Office apps. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Restrict printing from Office of documents opened in Application Guard Don’t allow printing to XPS Don’t allow printing to PDF Don’t allow printing to local printers Don’t allow printing to existing network printers This policy setting allows you to control how users can print from Office documents opened in Application Guard. If you enable this policy setting, you can choose to selectively retrict one or more of the following printing options. - Don't allow printing to XPS, prevents users from printing as XPS and saving the resulting file on the host. - Don't allow printing to PDF, prevents users from printing as PDF and saving the resulting file on the host. - Don't allow printing to local printers, prevents users from printing to locally attached printers. - Don't allow printing to existing network printers, prevents users from printing to previously connected network printers. Also, users can't search for additional printers. Note: if you select all the choices or don’t select any of the choices, then printing isn’t allowed in Application Guard. If you disable or don’t configure this policy setting, users can print to all printers configured on their device. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Configure Application Guard container precreation This policy setting determines if the Application Guard container, for isolating untrusted files, is pre-created for improved run time performance. If you enable this policy setting, you can specify the number of days to continue pre-creating an Application Guard container if the user has not opened a file with Application Guard. Pre-creating a container when the user logs in will decrease the wait time when opening an untrusted file. “65535” will configure Office to always create an Application Guard container when a user logs into Windows. "20" will configure Office to pre-create the container each time a user logs into Windows for up to 20 days after the last time the user opened an untrusted file using Application Guard. “0” will configure Office to never pre-create the container. Instead the container will only be created when a user opens their first untrusted file after logging into Windows. Note: if you configure Office to never pre-create a container then users will experience a longer wait when opening an untrusted file after logging into Windows. If you disable or don’t configure this setting, Office will use a built-in heuristic to pre-create the container. Note: This policy setting only applies to Microsoft 365 Apps for enterprise. Disable all Trust Bar notifications for security issues Privacy Suppresses prompt that asks to load a locally installed full-trust solution of a Document Information Panel in the background. This is normally shown if a full-trust solution is deployed and there are bound properties in the document (e.g. lookups) that must load the Document Information Panel in the background to retrieve the contents of the property. Enter pairs corresponding to the Document Information Panel solution path and a value of 1 to disable. If the value is set, the user will not be prompted when loading the full-trust solution in the background. The solution will load normally (and any non-related warnings that exist). Trust Local Solution Norwegian (Bokmal) When enabled, either default encoding or a specified encoding will be used. Disable password to open UI This policy setting controls whether Office 2016 users can add password encryption to documents. (Users would access this feature in Microsoft Office tab--click Info, click Protect Document, then click Encrypt with Password.) If you enable this policy setting, users cannot password protect their 2016 Office documents. If you disable or do not configure this policy setting, users can encrypt their 2016 Office files with passwords. Suppress hyperlink warnings This policy setting controls whether Office 2016 applications notify users about unsafe hyperlinks. Links that Office 2016 considers unsafe include links to executable files, TIFF files, and Microsoft Document Imaging (MDI) files. Other unsafe links are those that use protocols considered to be unsafe such as javascript. If you enable this policy setting, unsafe hyperlink warnings are suppressed for all users. If you disable or do not configure this policy setting, hyperlink warnings cannot be suppressed by any means. Office 2016 users will be notified that links are unsafe and must enable them manually to use them. Luxembourgish Irish English Bosnian (Latin) Global Options Use the system font instead of the Office default UI font. | Unchecked: Use the Office default UI font. Customize Workflow Cache 1 Workflow Cache 2 Workflow Cache 3 Workflow Cache 4 Workflow Cache 5 Workflow Cache 6 Workflow Cache 7 Workflow Cache 8 Workflow Cache 9 Workflow Cache 10 Workflow Cache 11 Workflow Cache 12 Workflow Cache 13 Workflow Cache 14 Workflow Cache 15 Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) The values entered will be used by the client to provide the user with a workflow to be made available to the user for all of their documents. The url should be a full path, such as 'http://localsharepointsite/Shared%20Documents'. Some workflows require that the user sign a document with an in-document signature, workflows indicated as such will only be shown the the user as an option in applications that support in-document signatures. This workflow must also be made available on the document library (setting these values only lets the client know about the workflow). Workflow Cache Increase the visibility of Accessibility Checker violations This policy setting controls whether a document, workbook, or spreadsheet with accessibility errors will cause a loud warning or error slab in the user interface. If you enable this policy setting, you may specify what happens when a document, workbook, or spreadsheet has accessibility errors: - Accessibility violations do not change Prepare for Distribution loudness (default) - Accessibility errors cause the Prepare for Distribution slab to be loud - Accessibility errors or warnings cause the Prepare for Distribution slab to be loud If you disable or do not configure this policy setting, the Accessibility Checker UI will be presented in its normal state. Accessibility violations do not change loudness (default) Accessibility errors cause slab to be loud Accessibility errors or warnings cause slab to be loud Enter a URL URL for location of document templates displayed when applications do not recognize rights-managed documents Provide the path to a folder with document, spreadsheet, and presentation files to be used as templates for a unencrypted wrapper for files with rights-managed content received by users with older versions of Office. Office includes plain-text wrapper documents that notify users about a rights-managed document in certain circumstances. If the user's application cannot recognize a document that includes rights-management, the user receives the wrapper document with information such as instructions for downloading a Rights Management Add-on for Windows Internet Explorer. You can provide a folder with customized templates for Office to use for these plain-text wrappers by using this setting to specify a URL to a folder. Prevent users from changing permissions on rights managed content This policy setting allows you to specify a location containing files that should always open in Protected View. If you enable this policy setting, you can specify a location containing files that always open in Protected View. If you check the "Allow sub folders" option, sub folders will also be included. If you disable or do not configure this policy setting, only the "Downloaded Program Files" and "Temporary Internet Files" folders will be considered unsafe locations. Block Web Add-ins This policy setting allows you to prevent users from using web add-ins. If you enable this policy setting, web add-ins are blocked and all other policy settings in the Trusted Catalogs folder are ignored. If you disable or do not configure this policy setting, apps are allowed. Other policy settings in the Trusted Catalogs folder determine which specific app sources are allowed. Block the Office Store This policy setting allows you to prevent users from using or inserting web add-ins that come from the Office Store. If you enable this policy setting, apps from the Office Store are blocked. If you disable or do not configure this policy setting, apps from the Office Store are allowed, unless the "Block Apps for Office" policy setting is enabled. Default SharePoint Catalog Location This policy setting allows you to set the location of the SharePoint Catalog that is designated as Default. The web add-ins contained in the Default Catalog can be inserted into Office documents by users. If you enable this policy setting, you can set the URL for the SharePoint Catalog from which users can insert apps into their Office documents. If you disable this policy setting, users cannot insert web add-ins from a SharePoint catalog. If you do not configure this policy setting or set any other policy settings in the Trusted Catalogs folder, users can set their own Default SharePoint Catalog location. Default Shared Folder Location This policy setting sets allows you to set the location of the Shared Folder that is designated as Default. If you enable this policy setting, you can set the URL for the Shared Folder from which users can insert web add-ins into their Office documents. If you disable this policy setting, users cannot insert web add-ins from a Shared Folder. If you do not configure this policy setting, or any other policy settings in the Trusted Catalogs folder, users can set their own Default Shared Folder location. Allow Unsecure web add-ins and Catalogs This policy setting allows users to run unsecure web add-in, which are add-ins that have web page or catalog locations that are not SSL-secured (https://), and are not in users' Internet zones. If you enable this policy setting, users can run unsecure apps. To enable specific unsecure web add-ins, you must also configure the Trusted Web add-in Catalog policy settings to trust the catalogs that contains those Add-ins. If you disable or do not configure this policy setting, unsecure web add-ins are not allowed. Trusted Catalog Location #1 Trusted Catalog Location #2 Trusted Catalog Location #3 Trusted Catalog Location #4 Trusted Catalog Location #5 Trusted Catalog Location #6 Trusted Catalog Location #7 Trusted Catalog Location #8 Trusted Catalog Location #9 Trusted Catalog Location #10 This policy setting sets the URL location of a Trusted SharePoint Catalog or Shared Folder Catalog. All web add-ins at this location are trusted so that users can work with these add-ins in their documents. However, the user cannot insert these add-ins into an Office document. If you enable this policy setting and set the URL, users can work with web add-ins from the SharePoint Catalog or Shared Folder Catalog at that URL. If you disable this policy setting, users will not be able to work with any web add-ins on Internet zone catalogs, and they will be prompted before they start web add-ins from any other catalogs. If you do not configure this policy setting or any others in the Trusted Catalogs folder, users can set their own Trusted Sharepoint Catalog and Shared Folder Catalog locations. Allow mix of policy and user locations This policy setting controls whether trusted locations can be defined by users, the Office Customization Tool (OCT), and Group Policy, or if they must be defined by Group Policy alone. If you enable this policy setting, users can specify any location as a trusted location, and a computer can have a combination of user-created, OCT-created, and Group Policy-created trusted locations. If you disable this policy setting, all trusted locations that are not created by Group Policy are disabled and users cannot create new trusted locations in the Trust Center. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled. Note - InfoPath 2016 and Outlook 2016 do not recognize trusted locations, and therefore are unaffected by this policy setting. This policy setting controls whether Office 2016 users can change permissions for content that is protected with Information Rights Management (IRM). The Information Rights Management feature of Office 2016 allows individuals and administrators to specify access permissions to Word documents, Excel workbooks, PowerPoint presentations, InfoPath templates and forms, and Outlook e-mail messages. This functionality helps prevent sensitive information from being printed, forwarded, or copied by unauthorized people. If you enable this policy setting, users can open and edit documents for which they have the appropriate permissions, but they cannot create new rights-managed content, add IRM to existing documents, change existing IRM permissions, or remove IRM from documents. If you disable or do not configure this policy setting, Office 2016 users can add, remove, or change IRM permissions for documents if they are authorized to do so. This policy setting allows you to specify a certificate to use as an escrow key for password protected files. If you enable this policy setting, the certificate you specify is used as an escrow key for all password protected files that are created on this machine. If you disable or do not configure this policy setting, an escrow key is not configured. Warning: These locations are used as a trusted source for opening files in Word, Excel, PowerPoint, Access, InfoPath, and Visio. Macros and ActiveX controls in these documents will execute without user warning. If you change or add a location make sure that the new location is secure. Disallow users to convert files that are in compatibility mode via the "Convert" command for Excel, PowerPoint, and Word. Disallow Convert Document (Excel, PowerPoint, Word) The Office client updates the User object in the Active Directory with the URL of the user's personal site. Please enter the length of URL that the attribute can accept. The default is 2048. Length AD Attribute containing Personal Site URL The maximum number of items to scan in the Outlook mailbox to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated. Maximum number of items to scan from today to determine the user's colleagues for recommendation Minimum time to wait (in seconds) before polling SharePoint Server to download published links. Frequency for polling the server to download published links Catalog Refresh Period This policy setting sets the apps for Office catalog refresh period, which is the amount of time (hours) Office waits between refreshes of the app catalogs. Refreshing the catalogs detects whether entitlements to any apps have expired. If you enable this policy setting, set the number of hours to determine the length of the refresh period. Choose a value between 0 (always refresh) and 10,000. If you disable or do not configure this policy setting, the catalog refresh period is set to the default 72 hours. The maximum number of days to scan the Outlook mailbox to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated. Maximum number of days to scan from today to determine the user's colleagues for recommendation Disable XPS and PDF Disable PDF Disable XPS Allows the user or administrator to specify which of the installed Microsoft PDF and XPS add-ins are available. When this setting is not configured, installed Microsoft PDF and XPS add-ins are visible to users. Default: same as not configured. Disable XPS: Hides and disables the Microsoft Save As XPS add-in. Disable PDF: Hides and disables the Microsoft Save As PDF add-in. Disable XPS and PDF: Hides and disables both the Microsoft Save As PDF and Save As XPS add-ins. Disable Microsoft Save As PDF and XPS add-ins Use the Sensitivity feature in Office to apply sensitivity labels to PDFs This policy setting controls whether sensitivity labels powered by Microsoft Purview Information Protection are applied to PDFs created in Word, Excel, and PowerPoint.​ If you enable this policy setting or don’t configure it, PDFs will inherit the sensitivity label and encryption from the source Word, Excel, and PowerPoint document. If you disable this policy setting, PDFs created in Word, Excel, and PowerPoint do not inherit their source file’s sensitivity labels and encryption. When the source file is encrypted, users who do not have the rights to remove protection cannot export to PDF. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. For more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2220953. The maximum number of recipients in an Outlook item to scan to determine the colleagues the user has. The larger the number, the more accurate the recommendation. The smaller the number, the faster the recommendations are generated. Maximum number of recipients in an Outlook item to scan to determine the user's colleagues for recommendation The folder name used to store network folder shortcuts published from SharePoint Server. "My SharePoints" (localized) by default. Folder name for Published Links This setting will enable the Colleague Import Outlook Add-in. Enable Colleague Import Outlook Add-in to work with Microsoft SharePoint Server This policy setting controls whether Office 2016 applications can poll Office servers to retrieve lists of published links. If you enable this policy setting, Office 2016 applications cannot poll an Office server for published links. If you disable or do not configure this policy setting, users of Office 2016 applications can see and use links to Microsoft SharePoint Server sites from those applications. You can configure published links to Office applications during initial deployment, and can add or change links as part of regular operations. These links appear on the My SharePoint Sites tab of the Open, Save, and Save As dialog boxes when opening and saving documents from these applications. Links can be targeted so that they only appear to users who are members of particular audiences. Note - This policy setting applies to Microsoft SharePoint Server specifically. It does not apply to Microsoft SharePoint Foundation. Disable the Office client from polling the SharePoint Server for published links The Office client updates the User object in the Active Directory with the URL of the user's personal site. Please enter the attribute of the user object which Office should update. The default is "wwwHomePage". AD attribute containing Personal Site URL The minimum time (in hours) to wait before rescanning the Outlook mailbox for new colleague recommendations. Minimum time to wait before rescanning the Outlook mailbox for new colleague recommendations SharePoint Server The minimum idle time (in milliseconds) to wait before the Colleague Import Outlook add-in begins to scan the mailbox. Minimum time before starting Colleague recommendation scan This setting will disable the Office client applications from setting the personal site URL in the Active Directory. Disable the user from setting the Personal Site URL Turn on file synchronization via SOAP over HTTP This policy setting controls file synchronization via SOAP over HTTP. If you enable or do not configure this policy setting, file synchronization via SOAP over HTTP is turned on. Turning file synchronization on here will still allow application-specific file synchronization to be turned off. If you disable this policy setting this policy setting, file synchronization via SOAP over HTTP is turned off. You will turn off file synchronization via SOAP over HTTP for other applications even if the application-specific file synchronization is turned on. Important: If you disable this policy setting, which will turn off file synchronization via SOAP over HTTP, you will also prevent co-authoring for Word and PowerPoint, and it will adversely affect the behavior of SharePoint Workspaces. Allow file synchronization via SOAP over HTTP only on domain networks This policy setting controls file synchronization via SOAP over HTTP. If you enable this policy setting, file synchronization via SOAP over HTTP is allowed only on domain networks. If you disable or do not configure this policy setting, file synchronization via SOAP over HTTP functions on all networks. Server Settings Encourage Prevent Enforce Allows enforcement of ISO 19005-1 compliance in PDF output. The values for his setting are as follows: Default: Options UI defaults to not ISO compliant. User may override. Encourage: Options UI defaults to ISO compliance. User may override. Prevent: Not ISO compliant. No user override. Enforce: ISO compliant. No user override. See Office Help for more details on the tradeoffs of choosing ISO 19005 compliance. Enforce PDF compliance with ISO 19005-1 (PDF/A) Allows users to choose a particular spellchecking style; Pre-reform or post reform. Allows users to select words from main lexicon only. Allow users to ignore words written in UPPERCASE. Allow users to ignore URLs and file paths. This policy setting enables you to specify an encryption type for password-protected Office 97-2003 files. If you enable this policy setting, you can specify the type of encryption that Office applications will use to encrypt password-protected files in the older Office 97-2003 file formats. The chosen encryption type must have a corresponding cryptographic service provider (CSP) installed on the computer that encrypts the file. See the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\ registry key for a list of CSPs installed on the local computer. Specify the encryption type to use by entering it in the provided text box in the following form: <Encryption Provider>,<Encryption Algorithm>,<Encryption Key Length>. For example, Microsoft Enhanced Cryptographic Provider v1.0,RC4,128 If you do not configure this policy setting, Excel, PowerPoint, and Word use Office 97/2000 Compatible encryption, a proprietary encryption method, to encrypt password-protected Office 97-2003 files. Encryption type for password protected Office 97-2003 files Encryption type: This policy setting allows you to specify an encryption type for Office Open XML files. If you enable this policy setting, you can specify the type of encryption that Office applications use to encrypt password-protected files in the Office Open XML file formats used by Excel, PowerPoint, and Word. The chosen encryption type must have a corresponding cryptographic service provider (CSP) installed on the computer that encrypts the file. See the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\ registry key for a list of CSPs installed on the local computer. Specify the encryption type to use by entering it in the provided text box in the following form: <Encryption Provider>,<Encryption Algorithm>,<Encryption Key Length> For example: Microsoft Enhanced Cryptographic Provider v1.0,RC4,128 If you disable or do not configure this policy setting, the default CSP is used. The default cryptographic service provider (CSP) is Microsoft Enhanced RSA and AES Cryptographic Provider, AES-128, 128-bit. Note: This policy setting does not take effect unless the registry key HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\<office application name>\Security\Crypto\CompatMode is set to 0. By default the CompatMode registry key is set to 1. Encryption type for password protected Office Open XML files Protect document metadata for password protected files This policy setting determines whether metadata is encrypted when an Office Open XML file is password protected. If you enable this policy setting, Excel 2016, PowerPoint 2016, and Word 2016 encrypt metadata stored in password-protected Office Open XML files and override any configuration changes on users' computers. If you disable this policy setting, Office 2016 applications cannot encrypt metadata in password-protected Office Open XML files, which can reduce security. If you do not configure this policy setting, when an Office Open XML document is protected with a password and saved, any metadata associated with the document is encrypted along with the rest of the document's contents. If this configuration is changed, potentially sensitive information such as the document author and hyperlink references could be exposed to unauthorized people. This policy setting determines whether metadata is encrypted in Office Open XML files that are protected by Information Rights Management (IRM). If you enable this policy setting, Excel, PowerPoint, and Word encrypt metadata stored in rights-managed Office Open XML files and override any configuration changes on users' computers. If you disable this policy setting, Office 2016 applications cannot encrypt metadata in rights-managed Office Open XML files, which can reduce security. If you do not configure this policy setting, when Information Rights Management (IRM) is used to restrict access to an Office Open XML document, any metadata associated with the document is not encrypted. Encryption mode for Information Rights Management (IRM) Cipher Block Chaining (CBC) Electronic Codebook (ECB) Encryption mode for IRM: If you enable this policy setting, you can choose from two options for controlling the encryption mode that Excel, PowerPoint, Word, Visio, and Outlook applications use to protect content with Information Rights Management (IRM): - Electronic Codebook (ECB) – ECB mode is always used when applying IRM encryption. - Cipher Block Chaining (CBC) – CBC mode is always used when applying IRM encryption. If you disable or don't configure this policy setting: - For Microsoft 365 Apps (Version 2304 or later): Cipher Block Chaining (CBC) mode is used. - For earlier Microsoft 365 Apps and Office LTSC 2021, 2019, and 2016: Electronic Codebook (ECB) mode is used. Protect document metadata for rights managed Office Open XML Files Enable Offline Mode Enable Offline Mode, work offline now Disable Offline Mode Specify if Offline Mode is disabled/enabled for custom Document Information Panel templates and if the Document Information Panel is currently in Offline Mode. Offline Mode for Document Information Panel Show UI if XSN is in Internet Zone Always show UI Never show UI This policy setting controls whether users see a security warning when they open custom Document Information Panels that contain a Web beaconing threat. InfoPath can be used to create custom Document Information Panels that can be attached to Excel workbooks, PowerPoint presentations, and Word documents. If you enable this policy setting, you can choose from three options for controlling when users are prompted about Web beaconing threats: - Never show UI - Always show UI - Show UI if XSN is in Internet Zone If you disable or do not configure this policy setting, the behavior is the equivalent of setting the policy to Enabled -- Never show UI. Display Language Workgroup building blocks path Specifies the location of workgroup building block templates. Set User path for the label page size update files This policy setting allows you to override the User path for the label page size update files. If you enable this policy setting, you may enter the path to the PSX update files and override the User path. If you disable or do not configure this policy setting, the User path for the label page size update files remains valid. Set Workgroup path for label page size update files This policy setting allows you to specify the Workgroup path for the label page size update files. This is useful if the organization has a centralized template depot. If you enable this policy setting, you may enter the path to the PSX update files. If you disable or do not configure this policy setting, there is no Workgroup path for the shared label templates. Prevent document inspectors from running This policy setting allows you to prevent document inspectors from running in Microsoft Office programs. If you enable this policy setting, specific document inspectors can be disabled by entering their Class ID (CLSID). The inspector CLSID can be found at HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\Word\"Document Inspectors" and similarly in Excel and PowerPoint. If you disable or do not configure this policy setting, document inspectors may be run in Microsoft Office programs. Path: Enable Workflows on My Site Allows workflows on My Site to be started from within the workflow enabled Office applications. Home Workflow Library Allows administrators to make workflows from a specified list or library available within the workflow enabled Office applications. The value of this key should be the URL to the list or library where the workflows have been made available. Document Information Panel Document Information Panel Beaconing UI Disable Document Information Panel This policy setting controls whether Excel, PowerPoint, and Word users can view document information in the Document Information Panel.The Document Information Panel replaces the modal Properties dialog box in earlier versions of Excel, PowerPoint, and Word, and allows users to view and edit metadata that is associated with the document. Office 2016 developers can create custom Document Information Panels to record a variety of information relevant to the document or the organization. If you enable this policy setting, forms and controls do not display in the Document Information Panel. The panel itself will display when users open it, but it will be blank. If you disable or do not configure this policy setting, users can view the Document Information Panel. Improve Proofing Tools Proofing Data Collection This policy setting controls whether the Help Improve Proofing Tools feature sends usage data to Microsoft. The Help Improve Proofing Tools feature collects data about use of the Proofing Tools, such as additions to the custom dictionary, and sends it to Microsoft. After about six months, the feature stops sending data to Microsoft and deletes the data collection file from the user's computer. If you enable this policy setting, this feature is enabled if users choose to participate in the Customer Experience Improvement Program (CEIP). If your organization has policies that govern the use of external resources such as the CEIP, allowing the use of the Help Improve Proofing Tools feature might cause them to violate these policies. If you disable this policy setting, the Help Improve Proofing Tools feature does not collect proofing tool usage information and transmit it to Microsoft. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to "Enabled". Disable Microsoft Office shared drawing code for metafile rendering Disables nearly all EMF's and WMF's will no longer be converted at runtime to be anti-aliased. Examples of EMF/WMF's that would remain "aliased" are: clipart, OLE object placeholders, any user inserted EMF/WMF image, etc. Any EMF/WMF containing text would be an exception to this and would be still getting anti-aliased. Disable Microsoft Office shared drawing code for blip caching Disables blip (an image representation) caching in the shared drawing code GEL. Caching can speed up certain operations. Disabling blip caching can be used to prevent caching during file open operations. Prevents users from uploading document templates to the Office.com Community. Chart Templates Server Location Specifies the location [URL or UNC] for server-based chart templates. Location: Most Recently Used Template List Length This setting determines the length of the recently used templates list in the New Document dialog box. The maximum value is 25 and the minimum value is 0. This setting applies to Word, Powerpoint, and Excel. Disable Built-in Quick Styles Office document cache location This policy setting determines the location where Office maintains the Office Document Cache. If you enable this policy setting, you can specify the location where Office maintains the Office Document Cache. If you disable or do not configure this policy setting, the Office Document Cache will be stored in the following location: %LocalAppData%\Microsoft\Office\16.0\OfficeFileCache Open documents from Office Document Cache first This policy setting allows the client application to open a document directly from the Office Document Cache if it is aware that the server the document resides on is not reachable. It may be useful in situations where you would like to wait to contact the server every time, time out and then fallback to the cache. If you enable or do not configure this policy setting, documents will be opened directly from the Office Document Cache when the server the document resides on is not reachable. If you disable this policy setting, Office will always attempt to first reach the server the document resides on before opening it from the Office Document Cache. Check-out to local disk This policy turns on the check-out to local disk feature. If you enable this policy setting, documents that are checked-out will be stored in the Local Drafts folder on the local disk. If you disable or do not configure this policy setting, documents that are checked out will be checked-out on SharePoint and no local copy will be created. Delete files from Office Document Cache This policy setting determines whether or not documents opened in Office are deleted from the Office Document Cache when they are closed. If you enable this policy setting documents are deleted from the Office Document Cache when they are closed. If you disable or do not configure this policy setting, documents are not deleted from the Office Document Cache when they are closed. Note: This policy setting does not apply to documents in SharePoint Workspace. Documents in SharePoint Workspace will not be deleted from the Office Document cache when they are closed. Sharepoint Workspace will not work correctly if this Group Policy is enabled. Specify whether or not to show the built-in Quick Styles. Disable built-in color variations Specify whether or not to show the built-in color variations. Log File Entries Number Specify the number of log entries to be removed from the log file when the maximum size limit is exceeded. (1-1000) Error Severity Level Specify the severity level of errors included in the log file created when loading layouts for SmartArt graphic layouts. Choosing Errors only will result in the smallest possible log file and choosing All will result in the largest log file. Errors only Level 1 warnings and below Level 2 warnings and below Level 3 warnings and below All Log File Maximum Size Specify the maximum size in bytes for the log file created when loading custom layouts. (Maximum = 100000) Bytes: Hide built-in shape style presets This policy setting allows you to specify whether or not to show the the built-in shape preset styles. Disable built-in graphics Specify whether or not to show the built-in SmartArt Graphics. Flag Repeated Words Allows users to flag or ignore repeated words. Allows users to ignore words with numbers. Enable MS Graph as Default Chart Tool in PowerPoint and Word Enables administrators to set the default chart creation tool to MS Graph instead of the default Excel Chart in PowerPoint and Word. Also blocks conversion of Graph charts to Office charts. Allow Map Charts to send geographic data to Bing This policy setting controls whether Map Charts can send geographic data to Bing. For more information about Map Charts, see https://go.microsoft.com/fwlink/?linkid=2194000. If you enable this policy setting, when a user adds geographic data to a new or existing map chart, that data will be sent to Bing and the map chart will be updated to include any new locations. If you disable this policy setting, when a user adds geographic data to a new or existing map chart, the geographic data won’t be sent to Bing and the map chart won’t be updated to include any new locations. Also, the user will see a message letting them know that their map chart can’t be created. If you don’t configure this policy setting, when a user adds geographic data to a new or existing map chart, that data will be sent to Bing and the map chart will be updated to include any new locations. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Check OWC data source providers This policy setting determines whether Office checks that an Office Web Components (OWC) data source provider is properly categorized before loading it. If you enable this policy setting, Office only loads properly categorized data source providers. If you disable or do not configure this policy setting, Office does not check that an OWC data source provider is properly categorized before loading it. Check Excel RTD servers This policy setting determines whether Office checks that a RealTimeData (RTD) is properly categorized before loading it. If you enable this policy setting Office only loads properly categorized RTD servers. If you disable or do not configure this policy setting, Office does not check that an RTD server is properly categorized before loading it. Check OLE objects This policy setting determines whether Office checks that an OLE object is properly categorized before loading it. If you enable this policy setting, you can select one of the following options: - Do not check: Office loads OLE objects without checking if they are properly categorized. - Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). - Strict allow list: Office only loads properly categorized OLE objects. If you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks. Do not check Override IE kill bit list Strict allow list Check ActiveX objects This policy setting determines whether Office checks that an ActiveX object is properly categorized before loading it. If you enable this policy setting, you can select one of the following options: - Do not check: Office loads ActiveX objects without checking if they are properly categorized. - Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). - Strict allow list: Office only loads properly categorized ActiveX objects. If you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks. Disable Package Repair This policy setting lets you disable the option to repair Open XML documents. If you enable this policy setting, Office 2016 prevents applications from performing a repair on corrupted Open XML documents. If you disable or do not configure this policy setting, when an Office 2016 application detects that an Open XML document has been corrupted, the user is given the option of repairing the corrupted document. Microsoft Save As PDF and XPS add-ins Disable inclusion of document properties in PDF and XPS output This policy setting controls whether document metadata can be saved in PDF and XPS documents. If you enable this policy setting, document properties metadata is not exported to PDF and XPS files. If you disable this policy setting, document properties metadata will always be saved with PDF and XPS files, and users will not be able to override this configuration. If you do not configure this policy setting, if the Microsoft Save as PDF or XPS Add-in for Microsoft Office Programs add-in is installed, document properties are saved as metadata when users save files using the PDF or XPS or Publish as PDF or XPS commands in Access, Excel, InfoPath, PowerPoint, and Word, unless the "Document properties" option is unchecked in the Options dialog. Suppress external signature services menu item This policy setting controls whether Outlook displays the "Add Signature Services" menu item. If you enable this policy setting, Outlook does not display the "Add Signature Services" menu item on the Signature Line drop-down menu. If you disable or do not configure this policy setting, users can select "Add Signature Services" (from the Signature Line drop-down menu on the Insert tab of the Ribbon in Excel, PowerPoint, and Word) to see a list of signature service providers on Office.com. Suppress Office Signing Providers This policy setting controls whether users can apply a default Microsoft Office signature line to Word documents and Excel workbooks. Digital signatures provide assurances of authenticity, integrity, and non-repudiation to electronic documents. In Excel and Word, users can add visible representations of their signatures to a document at the same time that they add digital signatures. The ability to capture digital signatures by using signature lines in Office 2016 documents makes it possible for organizations to use paperless signing processes for documents such as contracts or other agreements. If you enable this policy setting, you can choose from four options for enabling the default Microsoft Office 2016 signature lines: - Enable Western and East Asian - Both Microsoft Office Signature Line and Stamp Signature Line are available from the Signature Line drop-down menu on the Insert tab of the Ribbon. - Suppress default Western - Users cannot add the Microsoft Office Signature Line to documents. - Suppress default East Asian - Users cannot add the Stamp Signature Line to documents. - Suppress both Western and East Asian. Neither of the default signature lines is available. This only takes affect if there is at least one other valid third party signature provider installed. If you disable or do not configure this policy setting, Excel and Word include support for two kinds of signature lines, called Microsoft Office Signature Line and Stamp Signature Lines. The choice(s) available to the user vary according to the editing language(s) that are configured for the application at installation. - Microsoft Office Signature Line displays the letter "X" followed by a horizontal line, a familiar convention for handwritten signature lines. - Stamp Signature Line is only available to users of the Simplified Chinese, Traditional Chinese, Japanese, or Korean language versions of Office 2016, or to users who have installed Office 2016 Multi-Language Pack for one of these languages. This signature line displays a square, a convention in countries where rubber identity stamps (called hanko in Japan and South Korea) are used to sign documents. Both kinds of signature lines allow signers to specify their name, title, and e-mail address. If neither kind of signature line is appropriate, third-party signature products can be added to Office applications to serve different needs. If the correct signature line is not available for users to choose, they might be prevented from digitally signing documents. Note - This policy setting only applies to visible signature lines in Excel workbooks and Word documents. It does not affect the ability of users to add invisible digital signatures to Excel workbooks, PowerPoint presentations, and Word documents. Enable Western and East Asian Suppress default Western Suppress default East Asian Suppress both Western and East Asian Legacy format signatures This policy setting controls whether users can apply binary format digital signatures to Office 97-2003 documents. If you enable this policy setting, Office 2016 applications use the Office 2003 binary format to apply digital signatures to Office 97-2003 binary documents so that they will be recognized by the Office 2003 release and earlier applications. If you disable or do not configure this policy setting, Office 2016 applications use the XML--based XMLDSIG format to attach digital signatures to documents, including Office 97-2003 binary documents. XMLDSIG signatures are not recognized by Office 2003 applications or previous versions. If an Office 2003 user opens an Excel, PowerPoint, or Word binary document with an XMLDSIG signature attached, the signature will be lost. EKU filtering This policy setting allows you to specify enhanced key usage (EKU) values to be used in filtering a list of digital certificates for signing Excel, PowerPoint, and Word documents. An enhanced key usage (EKU) extension to a digital certificate is a collection of one or more values that indicate how a certificate should be used. Examples of EKU values include Smart Card Logon and Client Authentication. EKU filtering allows you to filter the list of installed certificates that can be used for digitally signing documents. The filtered list will appear when users attempt to select a certificate for digitally signing a document. If you enable this policy setting, you can specify a list of object identifiers (OIDs) that represent acceptable EKUs for certificates used in conjunction with signed documents. For example, for a certificate with the Encrypting File System (1.3.6.1.4.1.311.10.3.4) identifier, the OID is 1.3.6.1.4.1.311.10.3.4. This list of appropriate OIDs will vary according to the specific certificates that the organization uses. For a list of object IDs associated with Microsoft cryptography, see Microsoft Knowledge Base article 287547, "Object IDs associated with Microsoft cryptography" at http://officeredir.microsoft.com/r/rlidGPOIDAndCrypt2O14?clid=1033. If you disable or do not configure this policy setting, EKU filtering is not available. Set default image directory Sets the default directory for signing images (defaults to your pictures otherwise). Last-used signature image directory: Signing Enable Customer Experience Improvement Program German: Use post-reform rules IME (Japanese) If Outlook, Word, Excel, or PowerPoint shuts down unexpectedly and is restarted automatically (for example, by Document Recovery), the user is returned to a visual state similar to the state at shutdown. By default, this setting is enabled. Enable Smart Resume Hide the Learn more about SharePoint Hyperlink This policy setting allows you to remove the Learn more about SharePoint hyperlink from the Save to SharePoint form in the Backstage view for Word, PowerPoint, Excel, Visio, and Project. If you enable this policy setting, the hyperlink will not be displayed. If you disable or do not configure this policy setting, the hyperlink will appear for the Save to SharePoint form in the Backstage view when there are no locations listed. SharePoint Product Name This policy setting allows you to customize the label that is used for your company's SharePoint deployment. This will update the label that is used in the Open and Save As places in all Office applications. You can use this option to make it more clear to users where they should be saving company documents. If you enable this policy setting, the new string you provide will be used to refer to your company's SharePoint deployment. We recommend setting this to the name of your company. If you disable or do not configure this policy setting then the default string, "SharePoint," will be displayed in the Open and Save As UI in all Office applications. Change destination URL for SharePoint hyperlink This policy setting changes the destination URL of the Learn more about SharePoint hyperlink located on the Save to SharePoint form in the Backstage view for Word, PowerPoint, Excel, Visio, and Project. If you enable this policy setting, the hyperlink destination you provide will be used. If you disable or do not configure this policy setting, then the default destination URL to Learn more about SharePoint will be used. Show Screen Tips This policy setting allows you to determine whether Office applications display screen tips when users hover on commands on the Office Ribbon, and whether the screen tips display feature names and descriptions, or just feature names. If you enable this policy setting, you can select any of the following options: - Show feature descriptions: Both feature names and descriptions appear when users hover over commands on the Ribbon. - Don't show feature descriptions: Only feature names appear when users hover over commands on the Ribbon. - Don't show screen tips: Nothing appears when users hover over commands on the Ribbon. If you disable this policy setting, nothing appears when users hover over commands on the Office Ribbon. If you do not configure this policy setting, both feature names and descriptions appear when users hover over commands on the Office Ribbon. Show feature descriptions Don't show feature descriptions Don't show screentips Print ticket safe mode This policy setting allows you to determine whether Word, PowerPoint, or Excel turns off print ticket features the next time it attempts to use print ticket features after the application fails. Print ticket features include duplexing and stapling. If you enable or do not configure this policy setting, print ticket features are turned off if Word, PowerPoint, and Excel fail while attempting to use a printer's print ticket functionality. When the printer is next used, its print ticket features are turned off until the user requests to use them again. If you disable this policy setting, Word, PowerPoint, or Excel does not turn off print ticket features due to a previous application failure. This might result in repeated instances of the printer not responding. Set ScreenTip Language download location This policy sets the location for the Microsoft Office ScreenTip Language downloads. The Microsoft Office ScreenTip Language enables multi-lingual users to navigate the user interface (installed in a language they don't understand) by translating the Interface and showing the results in a ScreenTip (tooltip). The translations are available for every language from the Microsoft download center (for free) and while corporations may block Internet access they can direct users to an internal location such as an Intranet site or share. If you enable this policy setting, you may specify an internal site location where a corporation can copy the Microsoft Office ScreenTip languages. If you disable or do not configure this policy setting, users will be directed to the http://www.office.com webpage where users can view and select languages for download. Disables file previewers in Microsoft Office programs. This policy will not disable file previewers for Microsoft Windows. To disable a file previewer, type the CLSID for the previewer you want to disable (the previewer CLSID can be found at HKLM\Software\Microsoft\Windows\CurrentVersion\PreviewHandlers). File Previewing Activate Restricted Browsing Load Controls in Forms3 This policy setting allows you to control how ActiveX controls in UserForms should be initialized based upon whether they are Safe For Initialization (SFI) or Unsafefor Initialization (UFI). ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users' computers. ActiveX controls can access the local file system and change the registry settings of the operating system. If a malicious user repurposes an ActiveX control to take over a user's computer, the effect could be significant. To help improve security, ActiveX developers can mark controls as Safe For Initialization (SFI), which means that the developer states that the controls are safe to open and run and not capable of causing harm to any computers. If a control is not marked SFI, the control could adversely affect a computer--or it's possible the developers did not test the control in all situations and are not sure whether their control might be compromised at some future date.SFI controls run in safe mode, which limits their access to the computer. For example, a worksheet control can both read and write files when it is in unsafe mode, but perhaps only read from files when it is in safe mode. This functionality allows the control to be used in very powerful ways when safety wasn't important, but the control would still be safe for use in a Web page. If a control is not marked as SFI, it is marked Unsafe For Initialization (UFI), which means that it is capable of affecting a user's computer. If UFI ActiveX controls are loaded, they are always loaded in unsafe mode. If you enable this policy setting, you can choose from four options for loading controls in UserForms: 1- For a UFI or SFI signed control that supports safe and unsafe mode, load the control in unsafe mode. For an SFI signed control that only supports a safe mode configuration, load the control in safe mode. This option enforces the default configuration. 2 - Users are prompted to determine how UserForm forms will load. The prompt only displays once per session within an application. When users respond to the prompt, loading continues based on whether the control is UFI or SFI: - For a UFI signed control, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control using the default properties. - For an SFI signed control that supports both safe and unsafe modes, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control using safe mode. If the SFI control can only support safe mode, load the control in safe mode. This option is the default configuration in the Microsoft Office 2016 release. 3 - Users are prompted to determine how UserForm forms will load. The prompt only displays once per session within an application. When users respond to the prompt, loading continues based on whether the control is UFI or SFI: - For a UFI signed control, if users respond Yes to the prompt, load the control in unsafe mode. If users respond No, load the control with its default properties. - For an SFI signed control, load in safe mode. 4 - For a UFI signed control, load with the default properties of the control. For an SFI signed control, load in safe mode (considered to be the safest mode). If you disable or do not configure this policy setting, the behavior is as if you enable this policy setting and then select option 1. 1024 x 768 1152 x 882 1152 x 900 120 1280 x 1024 1600 x 1200 1800 x 1440 1920 x 1200 544 x 376 640 x 480 72 720 x 512 800 x 600 96 Active Directory/person name action integration Active Directory timeout for querying one entry for group expansion Additional permissions request URL All browsers "All browsers": Save new PowerPoint web pages in a format that is compatible with all browsers. | "Windows Internet Explorer 4.0 or later": Save new PowerPoint web pages in a format that requires Windows Internet Explorer 4.0 or later. | "Based on installed browsers": Examine the browsers installed on the user's computer and save new PowerPoint web pages in the smallest possible format that is compatible with all of the installed browsers. Enable this policy to allow full download in cached mode/F9 sync/send receive groups. Allow PNG as an output format This policy setting determines whether Office 2016 applications can output graphics in Portable Network Graphics (PNG) format when documents are saved as Web pages. If you enable this policy setting, Office 2016 applications can save graphics in PNG format and users cannot change this configuration. If you disable this policy setting, Office 2016 applications cannot save graphics in PNG format and users cannot change this configuration. If you do not configure this policy setting, Office 2016 applications do not save graphics in the PNG format. Users can change this functionality by opening the application's Options dialog box, clicking Advanced, clicking Web Options, and selecting the Allow PNG as a graphics format check box. Allow users with earlier versions of Office to read with browsers... This policy setting will allow users with earlier versions of Office to read documents with browsers supporting Information Rights Management. If you enable this policy setting, users with earlier versions of Office can read documents with browsers supporting Information Rights Management. Note that this will make all documents with restricted permissions larger. If you disable or do not configure this policy setting, users with earlier versions of Office cannot read documents with browsers supporting Information Rights Management. Allow Web Archives to be saved in any HTML encoding Use only Token Activation This policy setting allows you to specify Token Activation as the only volume activation method for volume editions of Office. This policy setting only applies if a Token Activation Issuance License has been installed on the computer. If you enable this policy setting, Token Activation is the only method that may be used to activate Office. If you disable or do not configure this policy setting, Key Management Service (KMS) or Token Activation may be used as methods to activate Office. Prevent Token Activation dialog from closing This policy setting allows you to prevent the Token Activation prompt for activation dialog from closing. If you enable this policy setting, the "Close" button and the "X" button at the upper right of the dialog are suppressed. If the user proceeds with activation and fails, the buttons will be enabled the next time the dialog appears. If you disable or do not configure this policy setting, the user may close the dialog when prompted for activation. Always expand groups in Office when restricting permission for documents Always prompt Always require users to connect to verify permission Always save Web pages in the default encoding. Arabic Alphabet (Windows) Automatic Discovery Allow roaming of all user customizations This policy setting allows roaming of both the Quick Access Toolbar and Ribbon customizations. If you enable this policy setting, users' Quick Access Toolbar and Ribbon customizations will be available to them on any computer on their network when they log on. If you disable or do not configure this policy setting, users' Quick Access Toolbar and Ribbon customizations will only be available to them on the computer on which they made the customizations. Automation Security Baltic Alphabet (ISO) Baltic Alphabet (Windows) Based on installed browsers Base URL Browsers Capitalize first letter of sentence Capitalize names of days Central European Alphabet (ISO) Central European Alphabet (Windows) Central European (DOS) Enabled: Allow the user to save Web Archives in any HTML encoding. Not enabled: Always use US-ASCII for Web Archives. This results in smaller files, but is not supported in Windows Internet Explorer 5.0 or earlier. This policy setting controls Information Rights Management (IRM). If you enable this policy setting, IRM will be turned off for users. If you disable or do not configure this policy setting, users will be able to use IRM. This policy setting controls whether group names automatically expand to display all the members of the group when selected in the Permissions dialog box. If you enable this policy setting, when users select a group name while applying Information Rights Management (IRM) permissions to Excel workbooks, InfoPath templates, Outlook e-mail messages, PowerPoint presentations, or Word documents in the Permissions dialog box, it will automatically expand to display all the members of the group. If you disable or do not configure this policy setting, when users select a group name in the Permissions dialog box, the members of the group are not displayed. This policy setting controls whether users can participate in the Microsoft Office Customer Experience Improvement Program to help improve Microsoft Office. When users choose to participate in the Customer Experience Improvement Program (CEIP), Office 2016 applications automatically send information to Microsoft about how the applications are used. This information is combined with other CEIP data to help Microsoft solve problems and to improve the products and features customers use most often. This feature does not collect users' names, addresses, or any other identifying information except the IP address that is used to send the data. If you enable this policy setting, users have the opportunity to opt into participation in the CEIP the first time they run an Office application. If your organization has policies that govern the use of external resources such as the CEIP, allowing users to opt in to the program might cause them to violate these policies. If you disable this policy setting, Office 2016 users cannot participate in the Customer Experience Improvement Program. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to "Enabled". This policy setting controls whether Office 2016 applications can load an XML expansion pack manifest file with a Smart Document. An XML expansion pack is the group of files that constitutes a Smart Document in Excel and Word. You package one or more components that provide the logic needed for a Smart Document by using an XML expansion pack. These components can include any type of file, including XML schemas, Extensible Stylesheet Language Transforms (XSLTs), dynamic-link libraries (DLLs), and image files, as well as additional XML files, HTML files, Word files, Excel files, and text files. The key component to building an XML expansion pack is creating an XML expansion pack manifest file. By creating this file, you specify the locations of all files that make up the XML expansion pack, as well as information that instructs Office 2016 how to set up the files for your Smart Document. The XML expansion pack can also contain information about how to set up some files, such as how to install and register a COM object required by the XML expansion pack. If you enable this policy setting, Office 2016 applications cannot load XML expansion packs with Smart Documents. If you disable or do not configure this policy setting, Office 2016 applications can load an XML expansion pack manifest file with a Smart Document. Completely disable the Smart Documents feature in Word and Excel This policy setting allows you to configure the ability to run smart documents in Word or Excel. However, since XML expansion packs can include many types of solutions in addition to smart document solutions, this policy setting cannot be used to disable the ability to run XML expansion packs. If you enable this policy setting, smart document solutions will not run. To fully manage the Smart Documents feature, this policy and the "Disable Smart Document's use of manifests" policy should both be configured. If you disable or do not configure this policy setting, smart document solutions will run. Checked: Do not calculate the total editing time while a document is open. | Unchecked: Track the editing time while a document is open. Checked: Do not prompt the user to share Excel workbooks when sending them for review. | Unchecked: Prompt the user to share Excel workbooks when sending them for review. This policy setting controls whether Excel can provide additional actions for certain words and phrases in a workbook through the right-click menu, and whether users can configure this behavior by checking or unchecking the "Enable additional actions in the right-click menu" option under the File tab | Options | Proofing | AutoCorrect Options | Actions tab. If additional actions functionality is turned on, Excel can recognize dates and financial symbols and provide additional actions for them. If you enable or do not configure this policy setting, users can configure Excel to provide additional actions. Note: Excel does not provide additional actions until users check the "Enable additional actions in the right-click menu" option in the UI. If you disable this policy setting, users cannot configure Excel to provide additional actions. This policy setting controls whether Office 2016 users can assign permissions to distribution lists when using Information Rights Management. If you enable this policy setting, Office 2016 users cannot specify a distribution list as an authorized party in the Permission dialog box. If you disable or do not configure this policy setting, Office 2016 users can specify distribution lists when using Information Rights Management (IRM) to restrict access to Excel workbooks, InfoPath templates, Outlook e-mail messages, PowerPoint presentations, or Word documents. Checked: PowerPoint publishes Web Archive presentations that contain a version of the presentation that is compatible with older browsers. | Unchecked: PowerPoint publishes Web Archive presentations that contain only the version of the presentation that is compatible with later browsers. Checked: Prevents the Office Clipboard from automatically appearing when multiple Copy commands are performed in any of the Office programs. | Unchecked: Permits the Office Clipboard to appear automatically when multiple Copy commands are performed in Office programs. This policy setting controls whether users can follow hyperlinks to templates on Office.com from within Office 2016 applications. If you enable this policy setting, users will not be able to follow any links to templates on Office.com from within Office 2016 applications. If you disable or do not configure this policy setting, users can download templates from Office.com from within Office 2016 applications directly. In Access, Excel, PowerPoint, and Word, users can download templates by clicking the Microsoft File tab, clicking New, and selecting a category listed under "Office.com" or "From Office.com". In InfoPath, users can go to the Office.com template download page by clicking File, clicking "Design a Form Template", and then clicking "Forms on Office.com". Note - Enabling this policy setting does not prevent users from downloading templates from Office.com using their Web browsers. Enabled: Tabs are emulated by replacing them with spaces when exporting HTML. | Disabled: Tab characters are not replaced with spaces when exporting HTML format. Checked: User is not able to define the default location to the personal site. | Unchecked: Default location is not restricted. This policy setting controls whether Office applications save Information Rights Management (IRM)--enabled files in a format that allows them to be viewed in Microsoft Internet Explorer with the Windows Rights Management Add-on. The Windows Rights Management Add-on for Internet Explorer provides a way for users who do not use Office 2016 to view, but not alter, files with restricted permissions. If you enable this policy setting, an embedded rights-managed HTML version of the content is saved with each IRM-enabled file, which can be viewed in Internet Explorer using the add-on. This configuration increases the size of rights-managed files, in some cases significantly. If you disable or do not configure this policy setting, Office applications do not save IRM--enabled files in a format that supports the Windows Rights Management Add-on. This policy setting controls whether users are required to connect to the Internet or a local network to have their licenses confirmed every time they attempt to open Excel workbooks, InfoPath forms or templates, Outlook e-mail messages, PowerPoint presentations, or Word documents that are protected by Information Rights Management (IRM). This policy is useful if you want to log the usage of files with restricted permissions on the server. If you enable this policy setting, users are required to connect to verify permissions. This policy setting will only affect protected files created on machines where the policy is enabled. If you disable or do not configure this policy setting, users are not required to connect to the network to verify permissions. Checked: Use Web Archive (*.mht) as the default format for the Save as Web Page command (File menu). | Unchecked: Use Web page (*.htm) as the default format for the Save as Web Page command (File menu). Check if Office is the default editor for Web pages created in Office Off On Check to specify a custom URL or e-mail address Chinese Simplified (GB2312) Chinese Simplified (HZ) Chinese Traditional (Big 5) Collaboration Settings Co-authoring Correct accidental use of cAPS LOCK key Correct TWo INitial CApitals Cyrillic Alphabet (DOS) Cyrillic Alphabet (ISO) Cyrillic Alphabet (KOI8-R) Cyrillic Alphabet (Windows) Default Default button text Default format for 'Publish' Default message text for a reply... Default message text for a review request... Default or specific encoding Default save prompt text Default subject for a review request Defines a list of custom error messages to activate. Define Shared Workspace URL's Defines the default message body text used in an email request for review when the review document is included only as an attachment. Defines the default message body text used in a reply to an email request for review when the reply contains a simple Web discussions link. Defines the default subject text for a review request. Defines the text to be used in tooltips for disabled toolbar buttons and menu items. Disable ad hoc reviewing Disable Clipboard Toolbar triggers Disable Internet Fax feature Disable web templates in File | New and on the Office Start screen This policy setting controls whether users can download templates from Office.com from within the Office applications. If you enable this policy setting, users will not see featured templates from Office.com in File | New and on the Office Start screen and will not be able to download templates from within Office applications. If you disable or do not configure this policy setting, users will see featured templates from Office.com in File | New and on the Office Start screen and will be able to download templates from within Office applications. Note - Enabling this policy setting does not prevent users from downloading templates from Office.com using their Web browsers. Hide all Office-provided templates on the Office Start screen and in File | New This policy setting controls whether Office-provided templates (from Office.com and shipped with the Office clients) are hidden on the Office Start screen and in File | New. If you enable this policy setting, users will not see any Office provided templates on the Office Start screen nor in File | New. If you disable or do not configure this policy setting, users will see Office provided templates on the Office Start screen nor in File | New. Note - enabling this policy setting does not prevent users from downloading templates from Office.com using their Web browsers and does not prevent users from using Office-provided templates installed on their hard drive using Windows Explorer to launch those templates. Hide dynamic lifecycle messages This policy setting controls whether dynamic lifecycle messages are displayed in Office applications. A dynamic lifecycle message appears as a notification in an Office application. This message is similar to a default lifecycle message, but provides additional information. For example, a message that reminds users to renew their subscription that also includes information to help them renew. Office periodically connects to the Internet and contacts Microsoft to determine if there are any relevant messages to display. If you enable this policy setting, Office won’t check for these types of messages, but, default lifecycle messages still display in Office applications. If you disable or don’t configure this policy setting, Office checks for these types of messages and displays them. Turn off Information Rights Management user interface Disable macros by default Turn off SharePoint dictionary update This policy setting allows you to turn off updating for SharePoint dictionary of Microsoft IME (Input Method Editor). This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, SharePoint dictionary is not updated, and you cannot add a new SharePoint dictionary. A SharePoint dictionary that was added before enabling this policy setting is used for conversion. If you disable or do not configure this policy setting, SharePoint dictionary can be updated and added. Turn off Outlook name dictionaries update This policy setting allows you to turn off updating for Outlook name dictionaries of Microsoft IME (Input Method Editor). This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, all Outlook name dictionaries are not updated. Outlook name dictionaries that were added before enabling this policy setting are used for conversion. If you disable or do not configure this policy setting, Outlook name dictionaries are generated, updated and used for conversion. Set update interval for Outlook Global Address List Dictionary This policy setting allows you to specify the update interval for the Outlook Global Address List Dictionary. This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, you can specify the update interval in minutes. For example, if you specify "720," the Outlook Global Address List Dictionary is updated every 720 minutes. If you do not configure this policy setting, the Outlook Global Address List Dictionary is updated every 1440 minutes (24 hours). Set update interval for Outlook Contacts Dictionary This policy setting allows you to specify the update interval for the Outlook Contacts Dictionary. This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, you can specify the update interval. For example, if you specify "720," the Outlook Contacts Dictionary is updated every 720 minutes. If you do not configure this policy setting, the Outlook Contacts Dictionary is updated every 1440 minutes (24 hours). Set comment fields for Outlook Global Address List Dictionary This policy setting allows you to specify the fields to display in the comments in the Outlook Global Address List Dictionary. This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, you can specify the fields to display by setting strings, which are represented by the following identification letter IDs. You must also use any IDs/strings in the following sequence. The ID for each field is as follows: a = Full Name c = Phonetic Name e = Company Name f = Department Name g = Title h = Office Location j = Email Address k = Business Telephone Number l = Business Address For example, if you want to display Full Name, Phonetic Name and Company Name, specify 'ace'. If you do not configure this policy setting, Full Name, Phonetic Name, Department Name, Job Title and Office Location are displayed in the comments, in this order. Set comment fields for Outlook Contacts Dictionary This policy setting allows you to specify the fields to display in the comments in the Outlook Contacts Dictionary. This policy setting applies to Japanese Microsoft IME only. If you enable this policy setting, you can specify the fields to display by setting strings, which are represented by the following identification letter IDs. You must also use any IDs/strings in the following sequence. ID for each field is as follows: a = Full Name c = Phonetic Name e = Company Name f = Department Name g = Title h = Office Location j = Email Address k = Business Telephone Number l = Business Address For example, if you want to display Full Name, Phonetic Name and Company Name, specify 'ace'. If you do not configure this policy setting, Full Name, Phonetic Name, Company Name, Department Name, and Job Title are displayed in the comments in this order. Stop reporting error messages This policy setting controls whether the application reports error messages. If you enable this policy, error messages will not be reported. If you disable or do not configure this policy setting, error messages will be reported. Stop reporting non-critical errors This policy setting controls whether the application reports non-critical errors. If you enable this policy, non-critical errors will not be reported. If you disable or do not configure this policy setting, non-critical errors will be reported. Disables/Enables uploading of media files. Disable 'send for review' Disable Smart Document's use of manifests Disables the custom fax cover sheet by displaying the message, "This option has been disabled by administrative policy" when the user clicks the Custom button in the Fax Service pane of the email message. Disable user from setting personal site as default location Disable VBA for Office applications Disable web view in the Office file dialog boxes Disallow custom cover sheet Allow users who aren’t admins to install language accessory packs This policy setting controls whether users can install language accessory packs for Office even if they don’t have local administrator permissions on their devices. By default, users must have local administrator permissions on their devices to install language accessory packs. If you enable this policy setting, users will be able to install language accessory packs for Office even if they don’t have local administrator permissions on their devices. They can install those language accessory packs by going to File > Options > Language in the app, such as Word. If you disable or don’t configure this policy setting, users who don’t have local administrator permissions on their devices won’t be able to install language accessory packs. Someone with local administrator permissions on the device will need to install the language accessory packs for the user. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2161939. Change or delete link to language pack download site This policy setting affects the language download link under the display and help language section. If you enable this policy setting you, you may enter the URL to another location where language packs may be downloaded. If you disable this policy setting the URL will be removed. If you do not configure this policy setting, the URL will remain available and point to the language pack download site on Office.com. Change or delete link to the proofing tools download site This policy setting affects the proofing tools link under the Editing language section. If you enable this policy setting you, you may enter the URL to another location where proofing tools may be downloaded. If you disable this policy setting the URL will be removed. If you do not configure this policy setting, the URL will remain available and point to the proofing tools site on Office.com. Display help in Display menus and dialog boxes in Allow co-authors to chat within a document This policy setting controls whether co-authors can use the chat functionality within an Office application to collaborate with each other when editing a document. If you enable or don’t configure this policy setting, users can chat with each other when co-authoring a document. If you disable this policy setting, users can’t chat with each other when co-authoring a document. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Do not display paths in alerts Emulate tabs with spaces when exporting HTML Do not prompt users to share Excel workbooks when sending for review Do not track document editing time Do not upload media files Enable ad hoc reviewing "Enable ad hoc reviewing": Enables the ad-hoc review feature. | "Exclude author's e-mail in documents": Enables the ad-hoc review feature, but the authors e-mail is not recorded on the sent document. | "Disable ad hoc reviewing": Disables the ad-hoc review feature. More actions URL This policy setting allows you to specify what URL to send users to when the More Actions button is clicked. The More Actions button can be found under File tab | Options | Proofing | Autocorrect Options... | Actions | More Actions. If you enable this policy setting and you specify a URL, the More Actions button will send the user to the specified URL. If you enable this policy setting and you do not specify a URL (you leave the field blank), the More Actions button is disabled. If you disable or do not configure this policy setting, the More Actions button will send the user to the default URL. Check for new actions URL This policy setting allows you to configure the "Check for New Actions" menu option. If you enable this policy setting, and when a URL is specified, a new "Check for New Actions" menu option will be added to the "Additional Actions" context menu. If you disable or do not configure this policy setting, or when it is enabled and a URL is not specified, a "Check for New Actions" menu option will not be shown in the "Additional Actions" context menu. Editing Languages Enables/Disables the Automatic Discovery feature. Enable 'send for review' "Enable 'send for review"': Enables the Send For Review feature. | "Exclude author's e-mail in documents": Enables the Send For Review feature, but the authors e-mail is not recorded on the sent document. | "Disable 'send for review"': Disables the Send For Review feature. Enables the editing language Afrikaans Enables the editing language Alsatian Enables the editing language Amharic Enables the editing language Arabic (Algeria) Enables the editing language Arabic (Bahrain) Enables the editing language Arabic (Egypt) Enables the editing language Arabic (Iraq) Enables the editing language Arabic (Jordan) Enables the editing language Arabic (Kuwait) Enables the editing language Arabic (Lebanon) Enables the editing language Arabic (Libya) Enables the editing language Arabic (Morocco) Enables the editing language Arabic (Oman) Enables the editing language Arabic (Qatar) Enables the editing language Arabic (Saudi Arabia) Enables the editing language Arabic (Syria) Enables the editing language Arabic (Tunisia) Enables the editing language Arabic (U.A.E.) Enables the editing language Arabic (Yemen) Enables the editing language Armenian (Armenia) Enables the editing language Assamese (India) Enables the editing language Azerbaijani (Cyrillic) Enables the editing language Azerbaijani (Latin) Enables the editing language Bangla (Bangladesh) Enables the editing language Bangla (India) Enables the editing language Bashkir Enables the editing language Basque Enables the editing language Belarusian Enables the editing language "Bosnian (Cyrillic, Bosnia and Herzegovina)" Enables the editing language "Bosnian (Latin, Bosnia and Herzegovina)" Enables the editing language Breton Enables the editing language Bulgarian Enables the editing language Burmese Enables the editing language Catalan Enables the editing language Central Kurdish (Iraq) Enables the editing language Cherokee Enables the editing language Corsican Enables the editing language Croatian (Bosnia and Herzegovina) Enables the editing language Croatian (Croatia) Enables the editing language Czech Enables the editing language Danish Enables the editing language Divehi Enables the editing language Dutch (Belgium) Enables the editing language Dutch (Netherlands) Enables the editing language Edo Enables the editing language English (Australia) Enables the editing language English (Belize) Enables the editing language English (Canada) Enables the editing language English (Caribbean) Enables the editing language English (Hong Kong S.A.R.) Enables the editing language English (India) Enables the editing language English (Indonesia) Enables the editing language English (Ireland) Enables the editing language English (Jamaica) Enables the editing language English (Malaysia) Enables the editing language English (New Zealand) Enables the editing language English (Philippines) Enables the editing language English (Singapore) Enables the editing language English (South Africa) Enables the editing language English (Trinidad and Tobago) Enables the editing language English (U.K.) Enables the editing language English (U.S.) Enables the editing language English (Zimbabwe) Enables the editing language Estonian Enables the editing language Faeroese Enables the editing language Filipino Enables the editing language Finnish Enables the editing language French (Belgium) Enables the editing language French (Cameroon) Enables the editing language French (Canada) Enables the editing language French (Caribbean) Enables the editing language French (Congo (DRC)) Enables the editing language French (Côte d'Ivoire) Enables the editing language French (France) Enables the editing language French (Haiti) Enables the editing language French (Luxembourg) Enables the editing language French (Mali) Enables the editing language French (Monaco) Enables the editing language French (Morocco) Enables the editing language French (Reunion) Enables the editing language French (Senegal) Enables the editing language French (Switzerland) Enables the editing language Western Frisian (Netherlands) Enables the editing language Fulfulde Enables the editing language Scottish Gaelic (United Kingdom) Enables the editing language Galician Enables the editing language Georgian Enables the editing language German (Austria) Enables the editing language German (Germany) Enables the editing language German (Liechtenstein) Enables the editing language German (Luxembourg) Enables the editing language German (Switzerland) Enables the editing language Greek Enables the editing language Greenlandic Enables the editing language Guarani Enables the editing language Gujarati Enables the editing language Hausa (Latin) Enables the editing language Hawaiian Enables the editing language Hebrew (Israel) Enables the editing language Hindi Enables the editing language Hungarian Enables the editing language Ibibio Enables the editing language Icelandic Enables the editing language Igbo Enables the editing language Indonesian Enables the editing language Inuktitut (Latin) Enables the editing language Inuktitut (Syllabics) Enables the editing language Irish (Ireland) Enables the editing language Italian (Italy) Enables the editing language Italian (Switzerland) Enables the editing language Japanese Enables the editing language Kannada Enables the editing language Kanuri Enables the editing language Kashmiri (Arabic) Enables the editing language Kashmiri (Devanagari) Enables the editing language Kazakh Enables the editing language Khmer Enables the editing language Konkani Enables the editing language Korean Enables the editing language Kyrgyz Enables the editing language Lao Enables the editing language Latin Enables the editing language Latvian Enables the editing language Lithuanian Enables the editing language Luxembourgish (Luxembourg) Enables the editing language Macedonian Enables the editing language Malay (Brunei) Enables the editing language Malay (Malaysia) Enables the editing language Malayalam Enables the editing language Maltese Enables the editing language Manipuri Enables the editing language Maori Enables the editing language Mapudungun Enables the editing language Marathi Enables the editing language Mohawk Enables the editing language Mongolian (Cyrillic) Enables the editing language Mongolian (Traditional Mongolian) Enables the editing language Nepali (India) Enables the editing language Nepali (Nepal) Enables the editing language Norwegian (Bokm†l) Enables the editing language Norwegian (Nynorsk) Enables the editing language Occitan Enables the editing language Persian Enables the editing language Spanish (Argentina) Enables the editing language Spanish (Bolivia) Enables the editing language Spanish (Chile) Enables the editing language Spanish (Colombia) Enables the editing language Spanish (Costa Rica) Enables the editing language Spanish (Dominican Republic) Enables the editing language Spanish (Ecuador) Enables the editing language Spanish (El Salvador) Enables the editing language Spanish (Guatemala) Enables the editing language Spanish (Honduras) Enables the editing language Spanish (Mexico) Enables the editing language Spanish (Nicaragua) Enables the editing language Spanish (Panama) Enables the editing language Spanish (Paraguay) Enables the editing language Spanish (Peru) Enables the editing language Spanish (Puerto Rico) Enables the editing language Spanish (Spain) Enables the editing language Spanish (United States) Enables the editing language Spanish (Uruguay) Enables the editing language Spanish (Venezuela) Enables the editing language Tibetan (China) Enables the editing language Welsh Enables the editing language Yi (China) Enables the editing language Oromo Enables the editing language Odia Enables the editing language Punjabi Enables the editing language Papiamento Enables the editing language Punjabi (Pakistan) Enables the editing language Polish Enables the editing language Dari Enables the editing language Pashto Enables the editing language Portuguese (Brazil) Enables the editing language Portuguese (Portugal) Enables the editing language K'iche Enables the editing language Quechua (Bolivia) Enables the editing language Quechua (Ecuador) Enables the editing language Quechua (Peru) Enables the editing language Romansh (Switzerland) Enables the editing language Romanian (Moldova) Enables the editing language Romanian (Romania) Enables the editing language Russian (Moldova) Enables the editing language Russian (Russia) Enables the editing language Kinyarwanda Enables the editing language Sakha Enables the editing language Sanskrit Enables the editing language Sindhi (Devanagari) Enables the editing language Sindhi (Arabic) Enables the editing language "Sami, Northern (Finland)" Enables the editing language "Sami, Northern (Norway)" Enables the editing language "Sami, Northern (Sweden)" Enables the editing language Sinhala Enables the editing language Slovak Enables the editing language Slovenian Enables the editing language "Sami, Southern (Norway)" Enables the editing language "Sami, Southern (Sweden)" Enables the editing language "Sami, Lule (Norway)" Enables the editing language "Sami, Lule (Sweden)" Enables the editing language "Sami, Inari (Finland)" Enables the editing language "Sami, Skolt (Finland)" Enables the editing language Somali Enables the editing language Albanian Enables the editing language "Serbian (Cyrillic, Bosnia and Herzegovina)" Enables the editing language "Serbian (Latin, Bosnia and Herzegovina)" Enables the editing language "Serbian (Cyrillic, Serbia)" Enables the editing language "Serbian (Cyrillic, Serbia and Montenegro (Former))" Enables the editing language "Serbian (Cyrillic, Montenegro)" Enables the editing language "Serbian (Latin, Serbia)" Enables the editing language "Serbian (Latin, Serbia and Montenegro (Former))" Enables the editing language "Serbian (Latin, Montenegro)" Enables the editing language Sesotho Enables the editing language Sesotho sa Leboa Enables the editing language Swedish (Finland) Enables the editing language Swedish (Sweden) Enables the editing language Swahili Enables the editing language Syriac Enables the editing language Tamil Enables the editing language Telugu Enables the editing language Tajik Enables the editing language Thai Enables the editing language Tigrinya (Eritrea) Enables the editing language Tigrinya (Ethiopia) Enables the editing language Turkmen Enables the editing language "Central Atlas Tamazight (Latin, Algeria)" Enables the editing language "Central Atlas Tamazight (Arabic, Morocco)" Enables the editing language Setswana Enables the editing language Turkish Enables the editing language Tatar Enables the editing language Uyghur (China) Enables the editing language Ukrainian Enables the editing language Urdu Enables the editing language Uzbek (Cyrillic) Enables the editing language Uzbek (Latin) Enables the editing language Valencian Enables the editing language Venda Enables the editing language Vietnamese Enables the editing language Lower Sorbian Enables the editing language Upper Sorbian Enables the editing language Wolof Enables the editing language Xitsonga Enables the editing language isiXhosa Enables the editing language Yiddish Enables the editing language Yoruba Enables the editing language Chinese (China) Enables the editing language Chinese (Hong Kong S.A.R.) Enables the editing language Chinese (Macao S.A.R.) Enables the editing language Chinese (Singapore) Enables the editing language Chinese (Taiwan) Enables the editing language isiZulu (Enclose path in double quotes) Encoding Enter Email field: Enter Home Phone field: Enter Manager field: Enter Mobile field: Enter Office field: Enter path to policy templates for content permission Enter Telephone field: Enter timeout in seconds: Exchange Settings Exclude author's e-mail in documents Fade Fax Files Graph gallery path Graph settings Greek Alphabet (ISO) Greek Alphabet (Windows) Hebrew Alphabet (Windows) Help Improved Error Reporting Primary Editing Language Instant Messaging Integration Windows Internet Explorer 4.0 or later Japanese (EUC) Japanese (JIS) Japanese (JIS-Allow 1 byte Kana) Japanese (JIS-Allow 1 byte Kana - SO/SI) Japanese (Shift-JIS) Language Preferences Large icons Latin 3 Alphabet (ISO) Leave field blank to disable the 'More actions...' button Leave field blank to disable the 'More actions...' button Licensing Settings List font names in their font Macros enabled (default) Manage Restricted Permissions Max number of documents being reviewed using ad hoc review Max number of documents being reviewed using 'send for review' Menu animations Microsoft Office 2016 Microsoft Office 2016 (Machine) Volume Activation Name: Never allow users to specify groups when restricting permission for documents Never ask user "Never ask user": Do not ask users if they want to send back changes to the author. | "Prompt for 'send for review"': Ask users if they want to send back changes to the author only if the document was sent using Send For Review and not with ad-hoc review. | "Always prompt": Ask users if they want to send back changes to the author for documents sent using either Send For Review or ad-hoc review. Send personal information This policy setting controls whether users can send personal information to Office. When users choose to send information Office 2016 applications automatically send information to Office. If you enable this policy setting, users will opt into sending personal information to Office. If your organization has policies that govern the use of external resources, opting users into the program might cause them to violate these policies. If you disable this policy setting, Office 2016 users cannot send personal information to Office. If you do not configure this policy setting, the behavior is the equivalent of setting the policy to "Enabled". Configure the level of client software diagnostic data sent by Office to Microsoft This policy setting allows you to configure the level of client software diagnostic data that is collected and sent to Microsoft about the Office client software running on the user's device. Client software diagnostic data is used to keep Office secure and up-to-date, detect, diagnose and remediate problems, and also make product improvements. This data does not include a user's name or email address, the content of the user's files, or information about apps unrelated to Office. If you enable this policy setting, you must choose which level of diagnostic data is sent to Microsoft. Your choices are Required, Optional, or Neither. If you choose Required, the minimum data needed to keep Office secure, up-to-date, and performing as expected on the device it's installed on is sent to Microsoft. If you choose Optional, additional data that helps make product improvements and provides enhanced information to help detect, diagnose, and remediate issues is sent to Microsoft. If you choose to send optional diagnostic data, required diagnostic data is also included. If you choose Neither, no diagnostic data about Office client software running on the user's device is sent to Microsoft. This option, however, significantly limits Microsoft's ability to detect, diagnose, and remediate problems that your users may encounter when using Office. If you disable or don't configure this policy setting, optional diagnostic data is sent to Microsoft. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085687 Level Optional Required Neither Do not allow Office to connect to the Internet This policy setting controls users' access to the online features of Office 2016. If you enable this policy setting, you can choose one of two options for user access to online content and services: * Do not allow Office to connect to the Internet – Office applications do not connect to the Internet to access online services, or to download the latest online content from Office.com. Connected features of Office 2016 are disabled. * Allow Office to connect to the Internet – Office applications use online services and download the latest online content from Office.com when users’ computers are connected to the Internet. Connected features of Office 2016 are enabled. This option enforces the default configuration. If you disable this policy setting or do not configure this policy setting, Office applications use online services and download the latest online content from Office.com when users’ computers are connected to the Internet. Users can change this behavior by deselecting the "Allow Office to connect to the Internet" checkbox in the Privacy Options section of the Trust Center. This policy setting specifies the RMS server Office uses by default. If you enable this policy setting, Office uses the server you specify as the default RMS server. If you disable or do not configure this policy setting, Office chooses the default RMS server. Do not allow to use Microsoft Conversion Service This policy setting controls users' access to the online features of Office 2016. Offline Address Book: Enable Send/Receive Group Download Offline Address Book: Limit manual OAB downloads Offline Address Book: Limit number of full OAB downloads Offline Address Book: Limit number of incremental OAB downloads Online Content Online Content Options Conversion Service Conversion Service Options Service Level Options This policy setting controls the types of services that can be used by the online features of Office 2016. If you enable this policy setting, you can choose one of three options for gating access to online services based on the owner of the service: * Office services only - Office 2016 applications on the computer communicate only with Office-owned services. All other Microsoft or third-party service integration in Office 2016 is disabled on the computer. This is the most restrictive option. * Microsoft services only - Office 2016 applications on the computer communicate only with Microsoft-owned services. All third-party service integration in Office 2016 is disabled on the computer. * All services - All service integration in Office 2016 is enabled on the computer. This is also the default configuration. If you disable or do not configure this policy setting, Office 2016 client applications allow all service integrations. Individual users can manage the set of services they use through the new My Office place in Office Backstage view. Office services only Microsoft services only All services Only containing a link Contact Card Contact Tab Remove Organization tab This policy setting allows you to remove the Organization tab from the Contact Card. If you enable this policy setting, the Organization tab is removed from the Contact Card. If you disable or do not configure this policy setting, the Organization tab appears on the Contact Card. Remove Member Of tab This policy setting allows you to remove the Member Of tab from the Contact Card. If you enable this policy setting the Member Of tab is removed from the Contact Card. If you disable or do not configure this policy setting the Member Of tab appears on the Contact Card. Do not display Hover Menu This policy setting allows you to stop the Hover Menu from displaying when a user hovers over a contact’s presence icon or display name with the mouse cursor. If you enable this policy setting, when a user hovers over a contact’s presence icon or display name with the mouse cursor, the Hover Menu will not be displayed. If you disable or do not configure this policy setting, the Hover Menu appears when a user hovers over a contact’s presence icon or display name with the mouse cursor. Turn off presence integration This policy setting allows you to turn off instant messaging (IM) presence integration for Microsoft Office applications. If you enable this policy, setting IM presence icons will not be displayed and presence integration will be turned off for Office applications. If you disable or do not configure this policy setting, IM presence icons will be displayed and presence integration will be turned on for Office applications. Do not display photograph This policy setting lets you specify if the photograph is shown on the contact card, e-mail header, reading pane, fast search results, global address list (GAL) dialog, Backstage, and quick contacts. If you enable this policy setting, photographs are not displayed in the locations listed above. If you disable or do not configure this policy setting, photographs appear in the locations listed above. Display legacy GAL dialog This policy setting allows you to specify the way contact information is displayed. If you enable this policy setting the global address list (GAL) dialog is displayed instead of the Contact Card when users double click a contact in Outlook. If you disable or do not configure this policy setting the Contact Card is displayed when users double click a contact in Outlook. Turn off click to IM option This policy setting allows you to remove the Instant Messaging (IM) option from the Contact Card and Outlook Ribbon. If you enable this policy setting the Instant Messaging icon does not appear on the Contact Card and Outlook Ribbon. If you disable or do not configure this policy setting the Instant Messaging icon appears on the Contact Card and Outlook Ribbon. Turn off click to telephone This policy setting allows you to remove the telephone option from the Contact Card and Outlook Ribbon. If you enable this policy setting, the telephone option does not appear in the Contact Card. Telephone links do not appear in the Contact Card. Telephone options do not appear in the Outlook Ribbon. If you disable or do not configure this policy setting telephone options appear in the Contact Card and Outlook Ribbon. Configure presence icons This policy setting allows you to specify whether Microsoft Office applications display presence icons in the user interface (UI). If you enable this policy setting, you may specify when applications display presence icons: - Display all: Presence icons are displayed in the UI. - Display some: Presence icons are displayed only in the Contact Card, Quick Contacts and SharePoint. - Display none: Presence icons are not displayed in the UI. If you disable or you do not configure this policy setting, presence icons are displayed in the UI. Display all Display some Display none Replace Label - E-mail This policy setting allows you to change or remove the 1st label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Work This policy setting allows you to change or remove the 2nd label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Work2 This policy setting allows you to change or remove the 3rd label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - WorkFax This policy setting allows you to change or remove the 4th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Mobile This policy setting allows you to change or remove the 5th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Home This policy setting allows you to change or remove the 6th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Home2 This policy setting allows you to change or remove the 7th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Other This policy setting allows you to change or remove the 8th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - IM This policy setting allows you to change or remove the 9th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Profile This policy setting allows you to change or remove the 10th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Office This policy setting allows you to change or remove the 11th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Company This policy setting allows you to change or remove the 12th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Work Address This policy setting allows you to change or remove the 13th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Home Address This policy setting allows you to change or remove the 14th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Other Address This policy setting allows you to change or remove the 15th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace Label - Birthday This policy setting allows you to change or remove the 16th label on the Contact Tab, which is on the Contact Card. The default values for the Contact Tab labels are Email (email address), Work (work phone), Work2 (work phone 2), WorkFax (work fax), Mobile (mobile phone), Home (home phone), Home2 (home phone 2), Other (other phone), IM (IM address), Profile (profile), Office (office location), Company (company), WorkAdd (work address), HomeAdd (home address), OtherAdd (other address), Birthday (birthday) . If you enable this policy setting, you can change or remove the labels on their Contact Tab by entering a new text string in the text box below. If you disable or do not configure this policy setting, the default label is displayed. Replace AD - E-mail This policy setting allows you to customize the 1st value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "email address" of line 1. If you disable or do not configure this policy setting, the default value for line 1 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Work This policy setting allows you to customize the 2nd value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "work phone" of line 2. If you disable or do not configure this policy setting, the default value for line 2 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Work2 This policy setting allows you to customize the 3rd value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "work phone 2" of line 3. If you disable or do not configure this policy setting, the default value for line 3 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - WorkFax This policy setting allows you to customize the 4th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "work fax" of line 4. If you disable or do not configure this policy setting, the default value for line 4 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Mobile This policy setting allows you to customize the 5th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "mobile phone" of line 5. If you disable or do not configure this policy setting, the default value for line 5 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Home This policy setting allows you to customize the 6th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "home phone" of line 6. If you disable or do not configure this policy setting, the default value for line 6 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Home2 This policy setting allows you to customize the 7th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "home phone 2" of line 7. If you disable or do not configure this policy setting, the default value for line 7 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Other This policy setting allows you to customize the 8th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "other phone" of line 8. If you disable or do not configure this policy setting, the default value for line 8 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - IM This policy setting allows you to customize the 9th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "IM address" of line 9. If you disable or do not configure this policy setting, the default value for line 9 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Profile This policy setting allows you to customize the 10th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "profile" of line 10. If you disable or do not configure this policy setting, the default value for line 10 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Office This policy setting allows you to customize the 11th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "office location" of line 11. If you disable or do not configure this policy setting, the default value for line 11 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Company This policy setting allows you to customize the 12th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "company" of line 12. If you disable or do not configure this policy setting, the default value for line 12 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Work Address This policy setting allows you to customize the 13th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "work address" of line 13. If you disable or do not configure this policy setting, the default value for line 13 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Home Address This policy setting allows you to customize the 14th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "home address" of line 14. If you disable or do not configure this policy setting, the default value for line 14 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Other Address This policy setting allows you to customize the 15th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "other address" of line 15. If you disable or do not configure this policy setting, the default value for line 15 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace AD - Birthday This policy setting allows you to customize the 16th value of the Contact Tab. If you enable this policy setting, you can change or remove the default value - "birthday" of line 16. If you disable or do not configure this policy setting, the default value for line 16 is displayed. Important: It is recommended that you specify a Messaging Application Programming Interface (MAPI) property and a corresponding Active Directory attribute (AD attribute). The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in this format: ADAttribute. Any properties entered which are binary or list box, cannot be displayed and are ignored. Example: To display the Assistant on the Contact Card, enter the AD attribute: Ms-exch-assistant-name. To remove the value, enter: null. Note: The Location and Calendar values for a default Contact Card are not MAPI Properties or AD Attributes. Related policy settings: Replace MAPI property n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. Replace MAPI - E-mail If you enable this policy setting, you can remove or change the default value "email address". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "email address" is shown. Replace MAPI - Work If you enable this policy setting, you can remove or change the default value "work phone". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "work phone" is shown. Replace MAPI - Work2 If you enable this policy setting, you can remove or change the default value "work phone 2". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "work phone 2" is shown. Replace MAPI - WorkFax If you enable this policy setting, you can remove or change the default value "work fax". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "work fax" is shown. Replace MAPI - Mobile If you enable this policy setting, you can remove or change the default value "mobile phone". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "mobile phone" is shown. Replace MAPI - Home If you enable this policy setting, you can remove or change the default value "home phone". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "home phone" is shown. Replace MAPI - Home2 If you enable this policy setting, you can remove or change the default value "home phone 2". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "home phone 2" is shown. Replace MAPI - Other If you enable this policy setting, you can remove or change the default value "other phone". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "other phone" is shown. Replace MAPI - IM If you enable this policy setting, you can remove or change the default value "IM address". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "IM address" is shown. Replace MAPI - Profile If you enable this policy setting, you can remove or change the default value "profile". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "profile" is shown. Replace MAPI - Office If you enable this policy setting, you can remove or change the default value "office location". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "office location" is shown. Replace MAPI - Company If you enable this policy setting, you can remove or change the default value "company". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "company" is shown. Replace MAPI - Work Address If you enable this policy setting, you can remove or change the default value "work address". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "work address" is shown. Replace MAPI - Home Address If you enable this policy setting, you can remove or change the default value "home address". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "home address" is shown. Replace MAPI - Other Address If you enable this policy setting, you can remove or change the default value "other address". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "other address" is shown. Replace MAPI - Birthday If you enable this policy setting, you can remove or change the default value "birthday". It is recommended that you specify a MAPI property and a corresponding AD attribute. The MAPI property should always be specified, unless Outlook is not installed, in which case only the AD attribute needs to be specified. It must be entered in decimal format. If you know the MAPIHexadecimalPropertyTag, you should convert this to a decimal value. Any properties entered which are binary or list box, cannot be displayed and thus are ignored. For example, if you want to show the Assistant on the Contact Card, for MAPI, the PR_ASSISTANT hexadecimal property tag is 0x3A30001E. In decimal format, it is 976224286. You would enter: 976224286. To remove the value entirely you would enter null. Note that for Location and Calendar values on the default Contact Card, the defaults are not MAPI Properties or AD Attributes. Related policy settings: Replace AD attribute n, Turn On Contact Tab Calendar Line Move, Turn On Contact Tab Location Line Move. If you disable or do not configure this policy setting, the default value of "birthday" is shown. Remove Calendar Line This policy setting enables you to remove the Calendar line on the Contact Tab, which is on the Contact Card. If you enable this policy setting, you can remove the Calendar line. If you disable or do not configure this policy setting, the Calendar line appears on the Contact Tab. Remove Location Line This policy setting enables you to remove the Location line on the Contact Tab, which is on the Contact Card. If you enable this policy setting, you can remove the Location line. If you disable or do not configure this policy setting, the Location line appears on the Contact Tab. Only containing an attachment Only send link Open Office documents as read/write while browsing Open Office document directly in Office application This policy setting allows you to choose whether Office documents located on web servers open directly in the registered application or through the web browser. If you enable this policy setting, files will open directly in the associated Office application, bypassing the web browser. If you disable this policy setting files will open through the web browser. Organize supporting files in a folder Other Outlook: Ad hoc reviewing Set document synchronization timeout This policy setting specifies the server timeout value in milliseconds for document synchronization. This policy setting does not apply when synchronizing documents on SharePoint servers. If you enable this policy setting, you may specify the server timeout value in milliseconds for document synchronization. If you disable or do not configure this policy setting, the server timeout will default to the Windows timeout value. Outlook: 'send for review' Pixels per inch PowerPoint: Save an additional version of the presentation for older browsers PowerPoint: web page format compatibility This policy setting allows you to prevent Word 2016 and Excel 2016 from loading managed code extensions. If you enable this policy setting, Word 2016 and Excel 2016 will not load managed code extensions. If you disable or do not configure this policy setting, Word 2016 and Excel 2016 will load managed code extensions automatically. This policy setting will prevent Office applications from using Visual Basic for Applications (VBA). If you enable this policy setting, you will disable Visual Basic for Applications (VBA) for Office applications. If you disable or do not configure this policy setting, Visual Basic for Applications (VBA) will be enabled for Office applications. See the Office Resource Kit for more important information about configuring security settings. Note: Changing this setting will not install or remove the VBA files from the computer. Prevent Word and Excel from loading managed code extensions Prompt for 'send for review' Prompt for sending reviewed document to author Prompt user Provide feedback with sound Random Enable additional actions in Excel Rely on VML for displaying graphics in browsers This policy setting controls whether Office 2016 applications save standard raster file format (GIF or PNG) copies of Vector Markup Language (VML) graphics when documents are saved as Web pages. If you enable this policy setting, Office 2016 applications will not generate alternate files for VML graphics when documents are saved as Web pages. In addition, the "Rely on VML for displaying graphics in browsers" check box is checked in the Web Options dialog in Excel, PowerPoint, and Word, and users cannot change it. If you disable this policy setting, Office 2016 applications also save copies of the graphics in a standard raster file format (GIF or PNG) for use by browsers that cannot display VML. In addition, the "Rely on VML for displaying graphics in browsers" check box is cleared in the Web Options dialog in Excel, PowerPoint, and Word, and users cannot change it. If you do not configure this policy setting, when saving VML graphics, Office 2016 applications also save copies of the graphics in a standard raster file format (GIF or PNG) for use by browsers that cannot display VML. If the "Rely on VML for displaying graphics in browsers" check box in the Web Options dialog is selected, applications will not save raster copies of VML graphics, which means those graphics will not display in non-Microsoft browsers. This policy setting determines whether users can access the Internet Fax feature in Office 2016 applications. If you enable this policy setting, Office 2016 users cannot send Internet faxes, and the Internet Fax menu item is removed from the Send sub-menu of the Microsoft Office menu. If you disable or do not configure this policy setting, Office 2016 users can use the Internet Fax feature. Replace text as you type (same as the system) (same as menus and dialog boxes) Save new Web pages as Web archives Save this document as Screen size Allow Office to connect to the Internet Allow to use Microsoft Conversion Service Security Settings Send link and attachment "Send link and attachment": When choosing Send for Review for a document on a server, send both a link and an attachment. | "Only send link": When choosing Send for Review for a document on a server, send only a link. | "Prompt user": When choosing Send for Review for a document on a server, prompt the user for what to send. Services Sets the custom button text that appears on the error dialog box. Defines the editing options for Office 2016 programs. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node. Please refer to the Office Resource Kit documentation for important information on setting the installed version of Microsoft Office. Sets the default language of online Help. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node. Sets the display language of the user interface for all Office 2016 programs. In addition to configuring this setting, consider enabling the same language in the 'Enabled Editing Languages' policy node. Sets the path to store user-defined custom charts. Sets the text displayed when the user saves a document in any format other than the default. Sets the total number of documents that can be sent for review by a user before reusing registry entries from previous review cycles. Sets the total number of documents that can be sent for review by a user using ad-hoc review before reusing registry entries from previous review cycles. Sets the URL for the location of customized error messages. Sets the value in the UI. Set the Automation Security level Set time in minutes (Default 15min) Disable All ActiveX This policy setting controls whether ActiveX controls are disabled. If you enable this policy setting, Office 2016 applications do not initialize ActiveX controls from non-trusted locations, and do not notify the user that the ActiveX controls are disabled. If you disable or do not configure this policy setting, users can set the trust level for ActiveX controls in the Trust Center in the 2016 versions of Microsoft Access, PowerPoint, Word, and Excel. The default configuration does not load untrusted ActiveX controls, but uses the Message Bar to prompt users about the control, and they can then choose whether to run the control. Shared paths Shared themes path Shared Workspace Show and manage the pair as a single file Show AutoCorrect Options buttons Show both parts and manage them individually Show both parts but manage as a single file Enabled Editing Languages Show Paste Options button when content is pasted This policy setting configures the Paste Options button. If you enable this policy setting, the Paste Options button is displayed after content is pasted. If you disable or do not configure this policy setting, the Paste Options button is not displayed. Do not show ScreenTips on toolbars This policy setting allows you to configure the "Show ScreenTips on Toolbars" option. If you enable this policy setting, ScreenTips will not be shown on toolbars. If you disable or do not configure this policy setting, ScreenTips will be shown on toolbars. Show shortcut keys in ScreenTips Site 1: Site 2: Site 3: Site 4: Site 5: Slide Smart Documents (Word, Excel) Additional Actions ActiveX Control Initialization This policy setting specifies the Microsoft ActiveX® initialization security level for all Microsoft Office applications. ActiveX controls can adversely affect a computer directly. In addition, malicious code can be used to compromise an ActiveX control and attack a computer. To indicate the safety of an ActiveX control, developers can denote them as Safe For Initialization (SFI). SFI indicates that a control is safe to open and run, and that it is not capable of causing a problem for any computer, regardless of whether it has persisted data values or not. If a control is not marked SFI, it is possible that the control could adversely affect a computer--or it could mean that the developers did not test the control in all situations and are not sure whether it might be compromised in the future. If you enable this policy setting, you can set the ActiveX security level to a number between 1 and 6. These security levels are as follows: 1 - Regardless of how the control is marked, load it and use the persisted values (if any). This setting does not prompt the user. 2 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, load in unsafe mode with persisted values (if any), or use the default (first-time initialization) settings. This level is similar to the default configuration, but does not prompt the user. 3 - If SFI, load the control in unsafe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with default (first-time initialization) settings. 4 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with default (first-time initialization) settings. 5 - If SFI, load the control in unsafe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with persisted values. 6 - If SFI, load the control in safe mode and use persisted values (if any). If not SFI, prompt the user and advise them that it is marked unsafe. If the user chooses No at the prompt, do not load the control. Otherwise, load it with persisted values. If you disable or do not configure this policy setting, if a control is marked SFI, the application loads the control in safe mode and uses persisted values (if any). If the control is not marked SFI, the application loads the control in unsafe mode with persisted values (if any), or uses the default (first-time initialization) settings. In both situations, the Message Bar informs users that the controls have been disabled and prompts them to respond. Important - Some ActiveX controls do not respect the safe mode registry setting, and therefore might load persisted data even though you configure this setting to instruct the control to use safe mode. This setting only increases security for ActiveX controls that are accurately marked as SFI. In situations that involve malicious or poorly designed code, an ActiveX control might be inaccurately marked as SFI. Specifies a location where a user can obtain more information about getting access to IRM content. Specifies how a Web page and folder pair is to be displayed and managed by Windows. Specifies the default location of the home page for Web queries. Specifies the location of data sources for database queries. Specifies the location of user templates. Specifies the location of workgroup templates. This policy setting allows you to specify a common location for sharing custom Office themes with users in your organization. A theme contains the following design elements: - Fonts - Colors - Effects If you enable this policy, the Themes gallery will list any custom themes that are found in the location that you specify. Only one location is allowed for this policy setting. Logical and UNC paths are supported. If you disable or don’t configure this policy, the Themes gallery will not list any custom themes, unless the user has saved one for their personal use. Specifies the location of workgroup themes. Specifies the name and URL of a shared workspace. The name and URL appear in the Document Management pane. Specifies the timeout value for querying one Active Directory entry for group expansion. Specify Permission Policy Default Server for Quick Access Toolbar Specify URL/Email address: (System Default) Target monitor Thai (Windows) This results in smaller files, but is not supported in Windows Internet Explorer 5.0 or earlier. This policy setting will prevent Office applications from using Visual Basic for Applications (VBA). If you enable this policy setting, you will disable Visual Basic for Applications (VBA) for Office applications. If you disable or do not configure this policy setting, Visual Basic for Applications (VBA) will be enabled for Office applications. See the Office Resource Kit for more important information about configuring security settings. Note: Changing this setting will not install or remove the VBA files from the computer. This will be forced on if 'Use long file names' is forced off. To insert the link, use '|0'. To insert the name of the document, use '|0'. Tools | AutoCorrect Options... (Excel, PowerPoint and Access) Tools | Options | General | Service Options... Tools | Options | General | Web Options... Tools | Options | Spelling Tooltip for disabled toolbar buttons and menu items Turn off screen clipping This policy setting allows you to turn off the Insert Screenshot feature. If you enable this policy setting, you will turn off the Insert Screenshot feature found in Microsoft Excel, PowerPoint, Outlook, and Word. This setting does not affect the screen clipping feature found in Microsoft OneNote or the Print Screen key on your keyboard. If you disable or do not configure this policy setting, the Insert Screenshot feature in Microsoft Excel, PowerPoint, Outlook, and Word will be available. This feature allows users to insert both screen clippings and the contents of an entire active window. Turkish Alphabet Ukrainian Alphabet (KOI8-RU) Unfold Universal Alphabet Universal Alphabet (Big-Endian) Universal Alphabet (UTF-8) Update links on save URL: Use '|0' to insert the link. Use '|1' to insert the discussion server and '|2' to insert the URL. Use 8 bit content-transfer-encoding "Use 8 bit content-transfer-encoding": Use a content-transfer-encoding of 8bit for all parts in a Web Archive file. | "Use 8 bit only for encoding text parts": Use a content-transfer-encoding of 8bit only for text parts. | "Use RFC-approved encoding": Always use RFC-approved encodings. Use 8 bit only for encoding text parts Use application macro security level Use long file names whenever possible Use RFC-approved encoding User queries path User templates path Use system font instead of the Office default UI font Vietnamese Alphabet (Windows) Visual Hebrew (ISO) Web Archive encoding Web Archive (*.mht) "Web Archive (*.mht)": The Publish command creates a Web Archive file. | "Web Page (*.htm)": The Publish command creates an HTML file. | "Default": The Publish command uses the default Web page format for publishing. Web Archives Web Folders: Managing pairs of Web pages and folders Web Page (*.htm) Web Query dialog box home page Western Alphabet (Windows) When choosing 'Send for Review...' With a link and an attachment With a simple Web discussions link With a simple Web discussions link and an attachment With a Web discussions link With a Web discussions link and an attachment With just an attachment With just a simple Web discussions link Workgroup templates path Location of shared custom themes Turn off all user customizations This policy setting can prevent users from making any Quick Access Toolbar and the Ribbon customizations. This includes customizations made through user interface (UI) entry points, or loaded from documents or templates. If you enable this policy setting, users will not be able to customize the Quick Access Toolbar and Ribbon through either the Quick Access Toolbar and Ribbon tabs in the application's Office Center dialog box, or the right-click menu on the Ribbon. In addition, Quick Access Toolbar and Ribbon customizations originating from documents or templates will not be loaded when these documents are opened. If you disable or do not configure this policy setting, users can make Quick Access Toolbar and Ribbon customizations through the UI, as well as load them from documents and templates. Turn off user customizations via UI This policy setting can prevent users from customizing both the Quick Access Toolbar and Ribbon through the user interface (UI). If you enable this policy setting, the following UI entry points are turned off: the Quick Access Toolbar and Ribbon tabs in the application's Office Center dialog box, and the Quick Access Toolbar and Ribbon customization options on the right-click menu on the Ribbon. If you disable or do not configure this policy setting, users can customize the Quick Access Toolbar and Ribbon through both the application’s Office Center dialog box, and the right-click menu on the Ribbon. Disable UI extending from documents and templates This policy setting controls whether Office 2016 applications load any custom user interface (UI) code included with a document or template. Office 2016 allows developers to extend the UI with customization code that is included in a document or template. If you enable this policy setting, Office 2016 applications cannot load any UI customization code included with documents and templates. If you disable or do not configure this policy setting, Office 2016 applications load any UI customization code included with a document or template when opening it. Ignore Internet and file addresses Suggest from main dictionary only Combine aux verb/adj. Use auto-change list Process compound nouns Allow accented uppercase in French Hebrew mode Arabic modes Full Mixed Partial Mixed authorized None Strict final yaa Strict initial alef hamza Both strict Checks/Unchecks the corresponding UI option. This option is available only if you are using the Korean language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for Korean, and have enabled support for Korean through Microsoft Office 2016 Language Preferences. Checks/Unchecks the option "Search misused word list". This option is available only if you are using the Korean language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for Korean, and have enabled support for Korean through Microsoft Office 2016 Language Preferences. Checks/Unchecks the option "Enforce accented uppercase in French". Specifies the script to use for checking spelling of Hebrew text. This option is available only if you are using a right-to-left language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for that language, and have enabled support for the language through Microsoft Office 2016 Language Preferences. Specifies the spelling rules to use for checking spelling of Arabic text. This option is available only if you are using a right-to-left language version of Microsoft Office or have installed Microsoft Office 2016 proofing tools or the Microsoft Office Single Language Pack 2016 for the language, and have enabled support for the language through Microsoft Office 2016 Language Preferences. File Open/Save dialog box Places Bar Location 1 Places Bar Location 2 Places Bar Location 3 Places Bar Location 4 Places Bar Location 5 Places Bar Location 6 Places Bar Location 7 Places Bar Location 8 Places Bar Location 9 Places Bar Location 10 This setting configures the list of items displayed in the Places Bar of the Common File dialog boxes. Valid items include browseable paths and environment variables of the form %...%. Items will be displayed in the Places Bar in the order in which they are entered into the template. Name: Path: Places Bar Locations Microsoft Access Microsoft Excel Microsoft SharePoint Designer Microsoft Office SmartArt Microsoft Office Document Cache Microsoft InfoPath Microsoft OneNote Microsoft Outlook Microsoft PowerPoint Microsoft Project Microsoft Publisher Microsoft Visio Microsoft Word Restricted Browsing When Restricted Browsing is activated the save as dialog box will be restricted such that the user will only be able to navigate to those locations and the children of those locations specified in the "Restricted Browsing\Approve Locations" policy setting. If you want to enable the "Approve Locations" policy setting, you must first enable the "Approve Locations" policy setting first. Approve Locations List of Approved Locations: Enter the name of the Location as Value Name, and path as the Value. Automatically receive small updates to improve reliability This policy setting controls whether Microsoft Office Diagnostics is enabled. Office Diagnostics enables Microsoft to diagnose system problems by periodically downloading a small file to the computer. If you enable this policy setting, Office Diagnostics collects information about specific errors and the IP address of the computer. Office Diagnostics does not transmit any personally identifiable information to Microsoft other than the IP address of the computer requesting the update. If you disable this policy setting, users will not receive updates from Office Diagnostics. If you do not configure this policy setting, this policy setting is not enabled, but users have the opportunity to opt into receiving updates from Office Diagnostics the first time they run an Office 2016 application. Downloading Framework Components Set a custom path to where users can access the missing component. Set download location for Microsoft .NET Framework 2.0 Language Pack Set a custom path to where users can access the missing component. Set download location for Microsoft .NET Framework 2.0 Don't allow the download of missing components but not showing the download hyperlinks for the missing components. Possible missing components are the Microsoft .NET 2.0 framework and Workflow component. Hide missing component download hyperlinks Maximum number of rows fetched per request while populating a lookup in the SharePoint list control The maximum number of rows fetched per request while populating a lookup in the SharePoint list control. Based on a standalone server's recommended hardware configuration a good default would be about 5000. The limit helps improve the performance of the SharePoint list control and is a defense in depth measure to prevent loading the server. 1 100 450 5000 Business Data Synchronization Database Web Service Set refresh frequency limit This policy setting allows you to enforce a lower limit in minutes for the refresh interval. Refreshing subscriptions too frequently can overload the LOB systems or the network with too many requests. If you enable this policy setting, you may specify the number of minutes for the refresh interval. This limit prevents cache subscriptions from being refreshed more frequently, reducing the number of requests issued against the line-of-business (LOB) system. If you disable or do not configure this policy setting, a default limit of 10 minutes will be used. Refresh frequency limit (minutes) Set maximum sleep interval This policy setting allows you to set an upper limit on the sleep interval used by the cache. The sleep is automatically interrupted when any application made changes in the cache or if there is an action scheduled to be performed. If you enable this policy setting, you may specify how long (in minutes) the synchronization should wait before resuming when there is no pending work to do. If you disable or do not configure this policy setting, then a default value of 20 minutes will be used. Sleep interval upper limit (minutes) Set maximum number of retries when synchronization fails This policy setting allows you to specify the maximum number of times a failed synchronization operation can be retried. If you enable this policy setting, you may specify the maximum number of times a failed synchronization operation can be retried. If you disable or do not configure this policy setting, then a default value of 50 times will be used. Maximum number of retries Set subscription refresh retry interval This policy setting allows you to specify the maximum number of minutes the system must wait before retrying the operation execution of a failed operation. If you enable this policy setting, you may specify the maximum interval in minutes before a retrying the operation execution of a failed operation. If you disable or do not configure this policy setting, then a default value of 360 minutes will be used. Set query processing timeout limit This policy setting allows you to specify the maximum number of minutes the system will spend processing an individual query. When the interval is exceeded, the processing is aborted and the query is marked as failed. The query will then be retried later. Several bulk operations (especially queries) can take a significant amount of time before all results are retrieved and processed. During this time no other operation can be processed. If you enable this policy setting, you may specify the maximum number of minutes the system will spend processing an individual query. If you disable or do not configure this policy setting, a default value of 20 minutes will be used. Set query items limit This policy setting allows you to specify the maximum number of items that will be added to the client’s cache as the result of executing a query. Several bulk operations (especially queries) can return a large number of items to be added to the cache. This increases the size of the cache, potentially exceeding the 4GB limit imposed by Microsoft SQL Server CE. It also increases the amount of work required to keep the cache synchronized and increases the load on the LOB server. In order to protect the system, a limit is used – any results processed before reaching the limit are still committed, but the operation is marked as failed and will be retried later. If you enable this policy setting, you may specify the maximum number of items that will be added to the client’s cache as the result of executing a query. If you disable or do not configure this policy setting, a default value of 2000 items will be used. Set the cleanup interval This policy setting allows you to specify the interval (in minutes) for how long successfully completed operations and other data that is no longer needed will remain in the cache before they can be deleted. The synchronization process leads to data in the cache that will no longer be needed. However, the data may be useful for troubleshooting purposes. To prevent the cache from growing too large, the cache contents should periodically be deleted. If you enable this policy setting, you may specify the interval (in minutes) for the times the contents in the cache are deleted. If you disable or do not configure this policy setting, a default value of 1440 minutes (1 day) will be used. Set errors cleanup interval This policy setting allows you to specify the interval for how long failed operations and other error data will remain in the cache before they can be deleted. Synchronization can fail for any reason. The failed operations and related instances are marked as "in error," and this data will eventually need to be removed from the cache. It is recommended that this interval be larger than the regular cleanup interval to give the user opportunities to troubleshoot errors. If you enable this policy setting, you may specify the interval (in minutes) for the times the failed operations and error data in the cache are deleted. If you disable or do not configure this policy setting, a default value of 10080 minutes (1 week) will be used. Set the database default instances limit This policy setting allows you to specify the default limit of how many instances per page the database shim can return. The application is allowed to specify a larger timeout programmatically. This is a default value to be used by the database shim to restrict the number of results that can be returned per page. The application can specify a larger limit via execution context. If you enable this policy setting, you may specify the default limit of how many instances the database shim can return. If you disable or do not configure this policy setting, a default value of 200 instances per page will be used. Set maximum database instances limit This policy setting allows you to specify the maximum limit of how many instances per page the database shim can return. This policy setting enforces the allowed maximum for applications including those that do not respect the default. If you enable this policy setting, you may specify the maximum limit of how many instances the database shim can return. If you disable or do not configure this policy setting, there will be no limit of how many instances the database shim can return. Set the database default timeout This policy setting allows you to specify the default timeout in milliseconds used by the database shim. The application can specify a larger limit via the execution context. If you enable this policy setting, you may specify the default timeout in milliseconds used by the database shim. If you disable or do not configure this policy setting, a default of 7000 milliseconds will be used. Set maximum database timeout limit This policy setting allows you to specify the maximum timeout in milliseconds used by the database shim. This maximum value is enforced for applications including those that do not respect the default. If you enable this policy setting, you may specify the maximum timeout in milliseconds used by the database shim. If you disable or do not configure this policy setting, no maximum timeout value will be enforced. Set web service default timeout This policy setting allows you to specify the default timeout in milliseconds for the web service shim. The application is allowed to specify a larger timeout programmatically. If you enable this policy setting, you may specify the default timeout in milliseconds for the web service shim. If you disable or do not configure this policy setting, a default of 7000 milliseconds will be used. Set maximum web service default timeout This policy setting allows you to specify the maximum timeout in milliseconds for the web service shim. This maximum value is enforced for applications that do not respect the default. If you enable this policy setting, you may specify the maximum timeout in milliseconds for the web service shim. If you disable or do not configure this policy setting, no maximum limit will be enforced. Set web service default return size limit This policy setting allows you to specify the default limit of how much data in kilobytes (KB) the web service shim can return per call. The application is allowed to specify a larger limit programmatically. If you enable this policy setting, you may specify the default limit of data in kilobytes the web service shim can return per call. If you disable or do not configure this policy setting, a default limit of 3000 KB will be used. Set maximum web service return size limit This policy setting allows you to specify the maximum limit of how much data in kilobytes (KB) the web service shim can return per call. This maximum value is enforced for applications including those that do not respect the default. If you enable this policy setting, you may specify the maximum limit of data in kilobytes the web service shim can return per call. If you disable or do not configure this policy setting, no maximum limit will be enforced. 1 2 3 4 5 6 Description: groove.exe Date: onent.exe visio.exe Name of the workflow to be shown to the user Name of the workflow to be shown to the user outlook.exe Description: pptview.exe winword.exe visio.exe Full URL to the document library with which the workflow is associated Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Description of the workflow to be shown to the user Description of the workflow to be shown to the user powerpnt.exe mse7.exe mse7.exe excel.exe outlook.exe Date: Name of the document library to be shown the user Name of the document library to be shown the user With a link and an attachment User queries path Date: Web Archive encoding visio.exe mspub.exe Name of the workflow to be shown to the user spDesign.exe Workflow requires the user to sign the document (Word/Excel only) onent.exe winproj.exe Full URL to the document library with which the workflow is associated powerpnt.exe Name of the document library to be shown the user Allow sub folders: Name: exprwd.exe Allow sub folders: Path: Path: mse7.exe spDesign.exe Date: Max number of documents being reviewed using 'send for review' Full URL to the document library with which the workflow is associated Most Recently Used Template List Length Default subject for a review request Full URL to the document library with which the workflow is associated powerpnt.exe Allow sub folders: pptview.exe Date: Allow sub folders: exprwd.exe Only containing an attachment msaccess.exe Name of the workflow to be shown to the user outlook.exe Description: winproj.exe Description: Use '|1' to insert the discussion server and '|2' to insert the URL. pptview.exe msaccess.exe msaccess.exe visio.exe exprwd.exe exprwd.exe excel.exe Name of the workflow to be shown to the user Description of the workflow to be shown to the user mspub.exe To insert the link, use '|0'. Description of the workflow to be shown to the user Description of the workflow to be shown to the user Description of the workflow to be shown to the user Path: Name of the document library to be shown the user Path: spDesign.exe Name of the document library to be shown the user excel.exe Online content options Conversion Service options Service Level Options Disable VBA for Office applications onent.exe Name of the document library to be shown the user Allow sub folders: Date: Allow sub folders: outlook.exe Allow sub folders: outlook.exe Date: User templates path Allow sub folders: msaccess.exe Allow sub folders: msaccess.exe Base URL groove.exe exprwd.exe powerpnt.exe exprwd.exe Allow sub folders: powerpnt.exe outlook.exe Description: Name of the workflow to be shown to the user With a Web discussions link and an attachment excel.exe With a simple Web discussions link and an attachment Path: Description: Path: Menu animations Description: Full URL to the document library with which the workflow is associated Path: excel.exe powerpnt.exe Error Severity Level Description: visio.exe Path: Name of the workflow to be shown to the user msaccess.exe Path: msaccess.exe Name: With a Web discussions link Path: onent.exe onent.exe spDesign.exe Encryption type: mspub.exe excel.exe With a Web discussions link Path: winword.exe mspub.exe Date: Full URL to the document library with which the workflow is associated Graph gallery path outlook.exe outlook.exe Name of the document library to be shown the user winword.exe Name of the workflow to be shown to the user groove.exe groove.exe winword.exe Automatic Discovery mse7.exe Name of the document library to be shown the user With a simple Web discussions link pptview.exe Workflow requires the user to sign the document (Word/Excel only) Workflow requires the user to sign the document (Word/Excel only) Allow sub folders: excel.exe Date: Display menus and dialog boxes in mspub.exe Name of the workflow to be shown to the user Allow sub folders: Name of the workflow to be shown to the user visio.exe excel.exe powerpnt.exe Escrow Certificates Digital Signatures Trust Center Trusted Catalogs Protected View Application Guard Path: Name of the workflow to be shown to the user pptview.exe onent.exe Description: Allow sub folders: Description of the workflow to be shown to the user Description: Full URL to the document library with which the workflow is associated spDesign.exe Path: Name of the document library to be shown the user Allow sub folders: Name: spDesign.exe msaccess.exe Date: Description: Path: onent.exe groove.exe Default button text Description: Workgroup templates path Location of shared custom themes groove.exe Date: Full URL to the document library with which the workflow is associated outlook.exe pptview.exe Name: Date: visio.exe winword.exe groove.exe Date: mspub.exe exprwd.exe Description: Full URL to the document library with which the workflow is associated mse7.exe msaccess.exe excel.exe PowerPoint: web page format compatibility excel.exe winword.exe With a simple Web discussions link With a Web discussions link Max number of documents being reviewed using ad hoc review mse7.exe winproj.exe Full URL to the document library with which the workflow is associated Tooltip for disabled toolbar buttons and menu items mspub.exe spDesign.exe groove.exe Allow sub folders: Name of the document library to be shown the user onent.exe exprwd.exe groove.exe mspub.exe pptview.exe winproj.exe winproj.exe powerpnt.exe powerpnt.exe msaccess.exe mse7.exe groove.exe Only containing a link Description of the workflow to be shown to the user winproj.exe Allow sub folders: excel.exe Name: Allow sub folders: mse7.exe Path: Date: Path: Workflow requires the user to sign the document (Word/Excel only) winword.exe Path: spDesign.exe exprwd.exe pptview.exe mspub.exe Path: groove.exe Date: spDesign.exe List of error messages to customize Name of the document library to be shown the user msaccess.exe Description: mse7.exe Default format for 'Publish' excel.exe Workflow requires the user to sign the document (Word/Excel only) Use '|1' to insert the discussion server and '|2' to insert the URL. exprwd.exe Name of the document library to be shown the user winproj.exe winword.exe With a simple Web discussions link Shared themes path Use '|1' to insert the discussion server and '|2' to insert the URL. outlook.exe msaccess.exe Name of the workflow to be shown to the user visio.exe Description: onent.exe pptview.exe exprwd.exe Path: winword.exe onent.exe Path: Allow sub folders: Path: mspub.exe mspub.exe Path: winproj.exe Workflow requires the user to sign the document (Word/Excel only) mse7.exe Description of the workflow to be shown to the user Description of the workflow to be shown to the user onent.exe spDesign.exe Description of the workflow to be shown to the user With just a simple Web discussions link Full URL to the document library with which the workflow is associated excel.exe outlook.exe With just an attachment Name of the document library to be shown the user powerpnt.exe visio.exe msaccess.exe groove.exe Date: Full URL to the document library with which the workflow is associated winword.exe outlook.exe Workflow requires the user to sign the document (Word/Excel only) groove.exe mspub.exe Workflow requires the user to sign the document (Word/Excel only) mspub.exe Description: Workflow requires the user to sign the document (Word/Excel only) Workflow requires the user to sign the document (Word/Excel only) pptview.exe Workflow requires the user to sign the document (Word/Excel only) winword.exe spDesign.exe pptview.exe winproj.exe winproj.exe Path: Default save prompt text Description: powerpnt.exe Path: Description: onent.exe visio.exe Description: Miscellaneous exprwd.exe visio.exe Path: Name: mspub.exe Path: groove.exe excel.exe Workflow requires the user to sign the document (Word/Excel only) Path: spDesign.exe Workflow requires the user to sign the document (Word/Excel only) onent.exe Date: Web Folders: Managing pairs of Web pages and folders winword.exe Workflow requires the user to sign the document (Word/Excel only) winproj.exe outlook.exe Full URL to the document library with which the workflow is associated onent.exe pptview.exe Name: msaccess.exe winword.exe Name of the document library to be shown the user mse7.exe Path: winword.exe Name: outlook.exe Security Settings Use '|1' to insert the discussion server and '|2' to insert the URL. Description of the workflow to be shown to the user Description of the workflow to be shown to the user Name: visio.exe mse7.exe exprwd.exe mse7.exe winproj.exe exprwd.exe winproj.exe mse7.exe Path: visio.exe Name of the workflow to be shown to the user powerpnt.exe winproj.exe powerpnt.exe Allow sub folders: powerpnt.exe Web Query dialog box home page spDesign.exe spDesign.exe Use '|1' to insert the discussion server and '|2' to insert the URL. Date: pptview.exe Date: Name of the workflow to be shown to the user visio.exe pptview.exe Age out documents older than n days This policy controls when locally cached Office documents are aged out of the Office Document Cache Number of days to keep local document versions in the local cache This policy controls how long local document versions are kept in the local cache. The default setting is 30 days and applies to Word, Excel, and PowerPoint. If you enable this policy setting, local document versions will be kept for the number of days specified, after which they’ll be deleted from the local cache. You can configure the setting with a value from 1 to 30. If you disable or don’t configure this policy setting, local document versions will be kept for 30 days, after which they’ll be deleted from the local cache. Set the max size of the Office Document Cache This policy controls how large the user's Office Document Cache can be. It does not apply to explicitly cached files on "OneDrive for Business Client" and "OneDrive (consumer) Client". Open Directly in Office Client Application This policy allows the admin to choose whether Office documents located on web servers open up directly in the App or go via the web browser Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word This policy setting allows you to remove Office Presentation Service from the list of online presentation services in PowerPoint and Word. This list appears when a user selects Present Online from the Share tab in Backstage view and in the ribbon in PowerPoint. If you enable this policy setting, Office Presentation Service is not shown as an option for presenting online. If you disable or do not configure this policy setting, users can select Office Presentation Service to present their PowerPoint or Word file to other users online. Present Online Presentation Services Configure presentation service in PowerPoint and Word 1 Configure presentation service in PowerPoint and Word 2 Configure presentation service in PowerPoint and Word 3 Configure presentation service in PowerPoint and Word 4 Configure presentation service in PowerPoint and Word 5 Configure presentation service in PowerPoint and Word 6 Configure presentation service in PowerPoint and Word 7 Configure presentation service in PowerPoint and Word 8 Configure presentation service in PowerPoint and Word 9 Configure presentation service in PowerPoint and Word 10 This policy setting allows you to add a presentation service to the list of online presentation services in PowerPoint and Word. This list appears when a user selects the More services link under Present Online on the Share tab in Backstage view in PowerPoint and Word and in the ribbon in PowerPoint. If you enable this policy setting, you can add a presentation service to the list of online presentation services in PowerPoint and Word. For each service you add, you must specify a name and URL. Optionally, you can specify a description, the URL of a web page with more information about the service, and the URL of a web page with service terms that the user can display by selecting the Service Agreement link. If you disable or do not configure this policy setting, the More services link displays only services that are manually added by users. Prevent users from adding online presentation services in PowerPoint and Word This policy setting allows you to prevent users from adding new or previously created presentation services to the list of online presentation services in PowerPoint and Word. These services appear when a user selects the More services link under Present Online on the Share tab in Backstage view. If you enable or do not configure this policy setting, the More services link does not allow users to add a new presentation service. In addition, all services previously added by users are removed from the list. If you disable this policy setting, the More Services link provides an option for users to add a new presentation service. In addition, the list of services previously added by users appears in the list of services. Disable Roaming Office User Settings Microsoft Office includes the ability to roam settings for specific Office features amongst devices by storing this data in the cloud. This data includes user activity such as the list of most recently used documents as well as user preferences such as the Office theme. This policy setting controls whether this data is allowed to be stored in the cloud. If you enable this policy setting, roaming settings are only stored locally and not synchronized to the Microsoft Office roaming settings web service. If you disable or do not configure this policy setting, roaming settings are synchronized with the Microsoft Office roaming settings web service and users can access their data from other devices. Existing data in the cloud is not affected by this policy. Restrict programmatic access for creating online presentations in PowerPoint and Word This policy setting allows you to restrict the ability to create an online presentation programmatically in PowerPoint and Word. If you enable this policy setting, an online presentation cannot be created programmatically. If you disable or do not configure this policy setting, an online presentation can be created programmatically. Telemetry Dashboard Specify the UNC path to store Office telemetry data This policy setting allows you to specify the Uniform Naming Convention (UNC) path of a shared folder to which Office Telemetry Agent sends Office telemetry data. If you enable this policy setting, Office Telemetry Agent uploads Office telemetry data to the UNC path that you specify. Use the format \\Server_Name\Share_Name. If you disable or do not configure this policy setting, Office Telemetry Agent does not send the data, and you cannot see any data in Office Telemetry Dashboard. Turn on data uploading for Office Telemetry Agent This policy setting turns on the data uploading feature in Office Telemetry Agent. If you enable this policy setting, Office Telemetry Agent periodically uploads telemetry data to a shared folder. If you disable or do not configure this policy setting, Office Telemetry Agent does not upload any data. However, telemetry data is still collected on the local computer and can be viewed by using Office Telemetry Log. Turn on privacy settings in Office Telemetry Agent This policy setting configures Office Telemetry Agent to disguise, or obfuscate, certain file properties that are reported in telemetry data. If you enable this policy setting, Office Telemetry Agent obfuscates the file name, file path, and title of Office documents before uploading telemetry data to the shared folder. If you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data that shows the full file name, file path, and title of all Office documents. Specify custom tags for Office telemetry data This policy setting allows you to add custom tags to the Office telemetry data that is sent by Office Telemetry Agent. If you enable this policy setting, the specified custom tags are shown in Office Telemetry Dashboard, where you can filter the collected data by the tag name. You can specify any string that you want to categorize and filter the collected data (for example, department name, title of user, and so forth). If you disable or do not configure this policy setting, no custom tags are shown in Office Telemetry Dashboard, and you cannot filter the data that is sent by Office Telemetry Agent. Disable Office animations This setting will disable all unnecessary Office animations. By default, animation effects, such as fading between views, are enabled. Office solutions to exclude from Office Telemetry Agent reporting This policy setting allows you to prevent telemetry data for Office solutions from being reported to Office Telemetry Dashboard. If you enable this policy setting, Office Telemetry Agent does not upload telemetry data for the specified Office solutions to Office Telemetry Dashboard. If you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data for all available solution types. Office applications to exclude from Office Telemetry Agent reporting This policy setting allows you to prevent telemetry data for Office applications from being reported to Office Telemetry Dashboard. If you enable this policy setting, Office Telemetry Agent does not upload telemetry data for the specified Office applications to Office Telemetry Dashboard. If you disable or do not configure this policy setting, Office Telemetry Agent uploads telemetry data for all Office applications. Turn on telemetry data collection This policy setting allows you to turn on the data collection features in Office that are used by Office Telemetry Dashboard and Office Telemetry Log. If you enable this policy setting, Office Telemetry Agent and Office applications will collect telemetry data, which includes Office application usage, most recently used Office documents (including file names) and solutions usage, compatibility issues, and critical errors that occur on the local computers. You can use Office Telemetry Dashboard to view this data remotely, and users can use Office Telemetry Log to view this data on their local computers. If you disable or do not configure this policy setting, Office Telemetry Agent and Office applications do not generate or collect telemetry data. Allow users to receive and respond to in-product surveys from Microsoft This policy setting allows you to control whether your users can receive and respond to in-product surveys in Microsoft 365 products. Microsoft will use this feedback to improve the product experience for users. The ability to receive and respond to in-product surveys is enabled by default. If you enable this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products. If you disable this policy setting, Microsoft will not survey your users while they are using Microsoft 365 products. If you don't configure this policy setting, your users will be able to receive and respond to in-product surveys about their experience using Microsoft 365 products. Coming soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center. Note: This data will be considered "Feedback" under your Microsoft 365 agreement, including information that would otherwise be considered "Customer Data" or "Personal Data". Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/?linkid=2142253 Allow users to submit feedback to Microsoft This policy setting allows you to control whether your users can provide feedback to Microsoft about their product experiences with Microsoft 365 products. Microsoft will use this feedback to improve the product for users. The ability to provide feedback is enabled by default. Users will see feedback buttons in various places in the product. Users control when they want to send feedback to Microsoft. If you enable this policy setting, your users will be able to submit feedback to Microsoft. If you disable this policy setting, your users will not be able to submit feedback to Microsoft. If you don't configure this policy setting, users will be able to submit feedback to Microsoft. Coming soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center. Note: This data will be considered "Feedback" under your Microsoft 365 agreement, including information that would otherwise be considered "Customer Data" or "Personal Data". Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/?linkid=2142253 Allow users to include screenshots and attachments when they submit feedback to Microsoft This policy setting controls whether your users see an option to include screenshots and attachments when they submit feedback to Microsoft. Screenshots and attachments help Microsoft troubleshoot product issues and Microsoft will use this information to improve product experiences for users. The option to include screenshots and attachments when submitting feedback to Microsoft is disabled by default. If you enable this policy setting, your users will see an option to include screenshots and attachments when they submit feedback to Microsoft. If you disable or don’t configure this policy setting, your users will not see an option to include screenshots and attachments when they submit feedback to Microsoft. Coming soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center. Note: This policy setting has no effect if the "Allow users to submit feedback to Microsoft" policy setting is set to Disabled. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/?linkid=2142253 Allow Microsoft to follow up on feedback submitted by users This policy setting controls whether Microsoft can follow up on feedback submitted by users to help understand the feedback, troubleshoot an issue submitted through feedback, or share back how Microsoft used the feedback to improve the product. Microsoft may send transactional emails or request follow-up conversations via email, voice, or other means related to the feedback or survey response. In some circumstances, Microsoft may ask for additional information to assist with troubleshooting. If you enable this policy setting, Microsoft may follow up on feedback submitted. If you disable or don’t configure this policy setting, Microsoft will not follow up on feedback submitted by your users. Coming soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center. Note: This policy setting has no effect if the "Allow users to submit feedback to Microsoft" policy setting or the “Allow users to receive and respond to in-product surveys from Microsoft” policy setting is set to Disabled. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/?linkid=2142253 Allow users to include log files and content samples when they submit feedback to Microsoft This policy setting controls whether your users see an option to include log files and content samples when they submit feedback to Microsoft. Log files and content samples help Microsoft troubleshoot product issues and Microsoft will use this information to improve product experiences for users. The option to include log files and content samples when submitting feedback to Microsoft is disabled by default. If you enable this policy setting, your users will see an option to include log files and content samples when they submit feedback to Microsoft. If you disable or don’t configure this policy setting, your users will not see an option to include log files and content samples when they submit feedback to Microsoft. Coming soon, you will be able to view and manage feedback from your org in the Microsoft 365 admin center. Note: This policy setting has no effect if the "Allow users to submit feedback to Microsoft" policy setting is set to Disabled. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/?linkid=2142253 Do not automatically hyperlink screenshots This policy setting allows you to specify whether or not Word, PowerPoint, Excel or Outlook automatically binds hyperlink to a screenshot inserted through the Insert Screenshot tool, if the screenshot is of an Internet Explorer browser window. If you enable this policy setting, Word, PowerPoint, Excel and Outlook does not automatically bind hyperlinks to screenshot of Internet Explorer browser windows. If you disable or do not configure this policy setting, Word, PowerPoint, Excel and Outlook automatically binds a hyperlink to screenshots of Internet Explorer browser windows. Show OneDrive Sign In Prompt user to sign in to OneDrive while performing a file save operation. Do not show "Manage Account" link for subscription licenses. This policy setting controls whether a "Manage Account" link is exposed in Account tab of the File menu for subscription licenses. If you enable this policy setting, Office does not expose a "Manage Account" link for subscription licenses. If you disable or do not configure this policy setting, Office exposes a "Manage Account" link for subscription licenses. Block signing into Office This policy setting controls whether users can provide credentials to Office using either their Microsoft Account or the user ID assigned by your organization for accessing Office 365. If you enable this policy setting, you can specify one of the following options: - If you select "Both IDs allowed", users can sign in and access Office content by using either ID - If you select "Microsoft Account only", users can sign in only by using their Microsoft Account. - If you select "Organization only", users can sign in only by using the user ID assigned by your organization for accessing Office 365. - If you select "None allowed", users cannot sign in by using either ID. If you disable or do not configure this policy setting, users can sign in by using either ID. Note: This policy does not apply to licensing. A user can license their product using any applicable ID if they have a valid license associated with that account. Providing credentials for licensing purposes when that ID type has been disabled, however, will not affect the signed in state of Office. Both IDs allowed Microsoft Account only Org ID only None allowed Use local user name and initials values regardless of signed-in user This policy setting controls whether Office uses the user name and initials of the user currently signed-in, or the user name and initials that are specified in the Options dialog box. If you enable this policy setting, regardless of any user currently signed-in, Office uses the user name and initials specified in the Options dialog box. If you disable or do not configure this policy setting, Office uses the user name and initials from the information provided by the user that is currently signed-in. Disable the Office Start screen for all Office applications This policy setting controls whether the Office Start screen appears on boot for all Office applications. If you enable this policy setting, users will not see the Office Start screen when they boot any Office application. If you disable or do not configure this policy setting, users will see the Office Start screen when they boot their Office applications. Disable Office Backgrounds This policy setting turns on and off the ability of users to select an Office background. If you enable this policy setting, users won’t see the Office Backgrounds setting in either the Account place or the Options dialog. They also won’t have an Office Background applied to the upper right of their Office applications. If you disable or don’t configure this policy setting, users will see the Office Backgrounds setting in the Account place and in the Options dialog, and they will have an Office Background applied to the upper right of their Office applications. Federated search for help This policy setting allows you to determine the sources of content that Office users in your organization can access through Office Help (F1). If you enable or do not configure this policy setting, users who utilize Office Help see content from both Office and the Internet. If you disable this setting, Office users’ search results through Help are limited to Office content. Subscription Activation Automatically activate Office with federated organization credentials This policy setting activates Office on users’ computers without prompting them to sign in to their Office 365 accounts. If you enable or do not configure this policy setting, and a user is already signed in with federated organization credentials, Office automatically activates when the user first starts an Office application. If either multiple or no organization credentials are found, the user is prompted to sign in. If you disable this policy setting, Office might prompt the user to sign in with their organization's credentials if Office is not installed directly by the user from his or her Office 365 account homepage. Notify users if they do not have proofing tools for a language they use This policy setting allows you to turn on or turn off notifications that are displayed to users when they use a language in their document but do not have proofing tools installed for that language. If you enable this policy setting, users see a message bar when they use a language in their document but do not have proofing tools installed for that language. Users cannot disable this notification because the "Never show again" button is not shown, and the checkbox to disable proofing notifications is removed from the Options dialog box. If you disable this policy setting, users do not see this message bar. If you do not configure this policy setting, users see this message bar. They can disable the notification by clicking the "Never show again" button or by clearing a check box in the Options dialog box. Disable First Run Movie This policy setting determines whether a video about signing-in to Office is played when Office first runs. If you enable this policy setting, the video does not run during Office First Run. If you disable or do not configure this policy setting, a video about signing-in to Office plays when Office first runs. Updates Enable Automatic Updates This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed via Click-to-Run. This policy has no effect on Office products installed via Windows Installer. If you enable or do not configure this policy setting, Office periodically checks for updates. When updates are detected, Office downloads and applies them in the background. If you disable this policy setting, Office won't check for updates. Hide option to enable or disable updates This policy setting allows you to hide the user interface (UI) options to enable or disable Office automatic updates from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. If you enable this policy setting, the Enable Update and Disable Updates options in the UI are hidden from users. If you disable or do not configure this policy setting, the Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI. Update Path This policy setting allows you to specify the location where Office will get updates from. If you enable this policy setting, you can specify one of the following for the update location: a network share, a folder on the local computer where Office is installed, or an HTTP address. Mapped network drives aren’t supported. If you enable this policy setting, but you leave the update location blank, Office will get updates from the Internet. If you disable or don’t configure this policy setting, Office will get updates from the Internet, unless you specify a different location by using the Office Deployment Tool. Important: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI). Target Version This policy setting allows you to specify a version number that you want to update Office to. For a list of version numbers, see http://go.microsoft.com/fwlink/?LinkId=616875. If you enable this policy setting, you specify the version that you want to update Office to. The next time Office looks for updates, Office will try to update to that version. The version must be available where Office is configured to look for updates (for example, on a network share). If you enable this policy setting, but you leave the version blank, Office is updated to the most current version that’s available at the update location for Office. If you disable or don’t configure this policy setting, Office is updated to the most current version that’s available at the update location for Office, unless you specify a different version by using the Office Deployment Tool. Important: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI). Don’t install Microsoft Teams with new installations or updates of Office This policy setting allows you to control whether Microsoft Teams is installed with a new installation of Office or when an existing installation of Office is updated. Note: This policy setting only applies to versions of Office, such as Microsoft 365 Apps for enterprise, where Teams is installed with a new installation or an update of Office. If you enable this policy setting, Teams won’t be installed with a new installation or an update of Office. If you disable or don’t configure this policy setting, Teams will be installed as part of a new installation or an update of Office, unless you have used some other method, such as the Office Deployment Tool, to exclude the installation of Teams. Don’t install a background service for Microsoft Search in Bing This policy setting controls whether a background service for Microsoft Search in Bing gets installed. The background service is included when you first install Microsoft 365 Apps for enterprise or when you update to a new version. This background service checks the status of a check box in the Microsoft Search section of the Microsoft 365 admin center. If the check box is selected, a Microsoft Search in Bing extension for Google Chrome is installed. The extension sets the default search engine to Bing, but users can change the default search engine even after the extension is installed. Note: The check box in the Microsoft 365 admin center isn’t selected by default. Therefore, even if the background service is installed, your users won’t see any changes unless you go into the Microsoft 365 admin center and select the check box. If you enable this policy setting, the background service won’t be installed. Since the background service isn’t installed, the extension won’t be installed, even if the check box in the Microsoft 365 admin center is selected. If you disable or don’t configure this policy setting, the background service will be installed. Even if the background service is installed, the extension won’t be installed unless the check box in the Microsoft 365 admin center is selected. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2109345. Update Channel This policy setting controls which update channel Office gets updates from. If you enable this policy setting, Office gets updates from the update channel that you select. If you disable or don't configure this policy setting, Office gets updates from its default channel, or by the update channel specified by the Office Deployment Tool. The default channel is determined by which Office product that is installed. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ Update Deadline This policy setting allows you to set a deadline by when updates to Office must be applied. You can set a deadline in one of two ways: Specify a date and time Specify a certain number of days after the update has been downloaded Prior to the deadline, users will receive multiple reminders to install the updates. If Office isn't updated by the deadline, the updates are applied automatically. If any Office programs are open, they'll be closed, which might result in data loss. If you're specifying a date and time, we recommend that you set the deadline at least a week in the future to allow users time to install the updates. If you enable this policy setting, you need to either specify a date and time or specify a certain number of days. Note: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI). Delay downloading and installing updates for Office This policy setting allows you to delay downloading and installing updates for Office by a specified number of days. Note: This policy setting won’t apply if you are using some other method to manage updates. For example, if you use Microsoft Endpoint Configuration Manager to deploy Office updates or if you use Group Policy to specify a target version. Also, updates won’t be delayed if you are switching Office to a different update channel. If you enable this policy setting, Office will delay downloading and applying updates by the number of days specified. The maximum value that you can specify is 14. If you specify 0, Office will download and apply updates as soon as Office detects that updates are available. Note: If you have also specified a deadline for updates to be installed, the deadline won't be considered until after the delay that you specify with this policy setting. If you disable or don’t configure this policy setting, Office will download and apply updates as soon as Office detects that updates are available. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Upgrade Office 2019 to Microsoft 365 Apps for enterprise This policy setting allows you to upgrade volume licensed versions of Office Professional Plus 2019 to Microsoft 365 Apps for enterprise. Note: For the user to be able to use Microsoft 365 Apps for enterprise, you must have purchased an Office 365 or Microsoft 365 plan that includes Microsoft 365 Apps for enterprise, and you must have assigned the user a license to use Microsoft 365 Apps for enterprise. If you enable this policy setting, the installed volume licensed version of Office 2019 on the user's computer will be upgraded to Microsoft 365 Apps for enterprise. We also recommend that you use Group Policy to specify an update path and an update channel for Microsoft 365 Apps for enterprise. Note: If there are volume licensed versions of Visio and Project on the user's computer, those won't be upgraded to subscription versions of Visio and Project. If you disable or don't configure this policy setting, Office 2019 isn't automatically upgraded to Microsoft 365 Apps for enterprise. But, you can initiate the upgrade by using some other method, such as by using the Office Deployment Tool. Prevent Office from being updated to a specific version This policy setting allows you to prevent Office from being updated to a specific version, and instead have Office be updated to a different version that you specify. If you enable this policy setting, you need to specify both the version to block and the version to update Office to. You list the version to block first and separate the two versions with a colon. You can specify more than one version to block by separating the entries with a vertical bar. For example, if you want to block versions 16.0.10326.10000 and 16.0.10326.20000 and have Office updated to version 16.0.10328.10000 instead, you would enter 16.0.10326.10000:16.0.10328.10000|16.0.10326.20000:16.0.10328.10000. If the blocked version is already installed, Office will be updated to the other version you've specified. Note: if you make a mistake entering the versions, the update won't be blocked. Also, be sure that the installation files for the version that you want to update Office to are available on the update location. If you disable or don't configure this policy setting, Office will be updated to whichever more current version is available in the location where Office is configured to get updates from, unless youve specified a version to block by using the Office Deployment Tool. Note: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI). Hide Update Notifications This policy setting allows you to hide notifications to users that updates to Office are available. When automatic updates are enabled for Office, in most cases updates are applied automatically in the background without any user input. However, updates can’t be applied if an Office program is open. If an Office program is open, other attempts are made to apply the updates at a later time. If, after several days, updates haven’t been applied, only then will users see a notification that an update to Office is available. If you enable this policy setting, users won’t see notifications that updates to Office are ready to be applied. If you disable or don’t configure this policy setting, users will see notifications that updates to Office are ready to be applied. This policy setting does not apply to notifications associated with update deadlines. Important: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI). Management of Microsoft 365 Apps for enterprise This policy setting enables programmatic control of Microsoft 365 Apps for enterprise. If you enable this policy setting, Microsoft Endpoint Configuration Manager or other application management solutions can manage Microsoft 365 Apps for enterprise. After applying the policy setting, you need to restart the Office Click-to-Run service. If you disable or do not configure this policy setting, the Configuration Manager update workflow will not be able to manage Microsoft 365 Apps for enterprise. You will, however, be able to continue to use the Office Deployment Tool and Configuration Manager’s program and packages or applications deployment methods. Note: This policy setting also applies to subscription versions of Project and Visio, which also are installed by using Click-to-Run. Prioritize BITS This policy setting prioritizes the use of Windows Background Interface Transfer Service (BITS) by the Office client when downloading Office updates from the Office Content Delivery Network (CDN). If enabled, BITS will be used on devices that are downloading Office updates directly from the Office CDN and throttle values used by BITS will be honored. The device will not leverage BITS if updates are obtained from a local UNC share. If disable or not configured, BITS will not be prioritized and http will be the primary transport for downloading updates. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ Online Repair This policy setting controls whether users can run an online repair for an Office client, such as Microsoft 365 Apps for enterprise, that comes with an Office 365 or Microsoft 365 plan. You can also control whether the online repair only uses a local source and doesn't use the Office Content Delivery Network (CDN) on the Internet. Note: Users must have administrative privileges on the local computer to run an online repair. If you enable or don't configure this policy setting, users can run an online repair from "Programs and Features" or "Add/Remove Programs" in Control Panel. The online repair downloads and reinstalls Office from the Office CDN or from a local source, such a network share, depending on how Office is configured to get updates. If you aren't using the Office CDN, the local source must contain all the required files, including language files, to perform the repair. Select "Use Office CDN (if needed)" if you want to use the Office CDN as an alternative location for the repair if the local source isn't available or doesn't contain all the necessary files. You can also use a local copy of the Office Deployment Tool (setup.exe) for the repair by entering a local path for the Office Deployment Tool. This path can be a network share. If setup.exe can't be found in the local path specified, and "Use Office CDN (if needed)" is selected, then the online repair downloads a copy of setup.exe from the Office CDN. Otherwise, the online repair will fail. The repair maintains all configuration settings, including products, languages, excluded applications, and update settings. If you disable this policy setting, users can't run an online repair, but they can still run a quick repair. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Disable Office First Run on application boot This policy setting determines whether the Office First Run comes up on first application boot if not previously viewed. If you enable this policy setting, the Office First Run does not run on first application boot. If you disable or do not configure this policy setting, the Office First Run about signing-in to Office comes up on first application boot if not previously viewed. Enable DLP on application boot This policy setting determines whether DLP executes on application boot. If you enable this policy setting, DLP runs on application boot. If you disable or do not configure this policy setting, DLP does not run on application boot. Trust legacy VBA signatures This policy setting allows you to control how Office loads and verifies legacy Visual Basic for Applications (VBA) signatures. If you enable or do not configure this policy setting, Office applications can load and verify legacy VBA signatures. If you disable this policy setting, Office applications can’t load or verify legacy VBA signatures. They can only load and verify agile VBA signatures. Set the minimum operating system for verifying agile VBA signatures This policy setting allows you to set the minimum operating system (OS) on which agile VBA signatures produced by Office can be verified. This ensures the hashing algorithm used to sign is compatible with the specified OS and later versions. If you enable this policy setting, Office uses the OS you specify as the minimum OS to verify agile VBA signatures. If you disable or do not configure this policy setting, Office uses Windows 7 as the minimum OS to verify agile VBA signatures. If you specify a minimum OS version that is higher than the highest OS supported by Office, Office uses the highest supported OS to verify agile VBA signatures. Windows XP Windows Vista Windows 7 Windows 8 Age out the locally cached copies of server document versions that are more than n days old This policy controls when locally cached Office version documents from the server are aged out of the local cache. If you enable this policy setting, Office document versions from the server that have been locally cached for more than n days, will be deleted from the local cache. If you disable or don't configure this policy setting, Office document versions from the server that have been locally cached, will be deleted from the local cache if older than the default of one day. Hide Microsoft cloud-based file locations in the Backstage view This policy setting allows you to hide Microsoft cloud-based file locations in the Backstage view in Office. This helps prevent users from opening, saving, or sharing cloud-based files to locations such as: OneDrive, SharePoint, or Third Party Services. This policy setting only applies to Word, PowerPoint, and Excel. To filter specific services, add the values for all services to be disabled: 1 - OneDrive Personal 4 - ThisPC 8 - SharePoint OnPrem 16 - Recent Places 32 - SharePoint 64 - OneDrive for Business 128 - Third Party Services Special Values: 0 - (Default) All services enabled. 2 - (Legacy Value) Disable SharePoint and OneDrive for Business. 4294967295 - All optional services disabled. For example, OneDrive Personal (1), This PC (4) and Third Party Services (128) can all be disabled with a value of 133. This value is calculated as follows: 1 + 4 + 128 = 133 Common Setting Values: 1 - Disable OneDrive Personal 2 - Disable SharePoint Online and OneDrive for Business 3 - Disable SharePoint Online, OneDrive for Business, and OneDrive Personal If you disable or don’t configure this policy setting, users can use any configured Microsoft cloud-based file location to open, save, and share files. Enable EDU Org ID Sign In in Office from Windows Store This policy setting controls whether Office product is activated with the student’s email account. By default, Org Id sign in is not allowed. If you enable this policy setting, student’s email Id sign in will be used to activate the version of Office installed on the computer. If you disable this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer. Enabling or disabling this policy setting takes precedence over any setting that’s been configured by using the Office Deployment Tool or by manually editing the registry. If you don’t configure this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer unless you’ve enabled Org ID to sign in by manually editing the registry. Don’t show the What’s New information for Excel This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Excel for the first time after Excel has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Don’t show the What’s New information for PowerPoint This policy setting controls whether the What’s New information is shown when a user opens the desktop version of PowerPoint for the first time after PowerPoint has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Don’t show the What’s New information for OneNote This policy setting controls whether the What’s New information is shown when a user opens the desktop version of OneNote for the first time after OneNote has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Don’t show the What’s New information for Outlook This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Outlook for the first time after Outlook has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Office Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Don’t show the What’s New information for Word This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Word for the first time after Word has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Don’t show the What’s New information for Visio This policy setting controls whether the What’s New information is shown when a user opens the desktop version of Visio for the first time after Visio has been updated with new features. By default, the What’s New information is shown. If you enable this policy setting, the What’s New information isn’t shown. Also, the What’s New button in File > Account is disabled. If you disable or don’t configure this policy setting, the What’s New information is shown. Note: There are separate policy settings for Word, Excel, PowerPoint, Outlook, OneNote, and Visio. Allow file extensions for OLE embedding This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ This policy setting allows you to specify which file extensions Office won’t block when they are embedded as an OLE package in an Office file by using the Object Packager control. By default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759. Important: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user. If you enable this policy setting, enter the file extensions to allow, separated by semicolons. For example, exe;vbs;js. If you disable or don’t configure this policy setting, the default set of file extensions will be blocked. If you want to block additional file extensions, enable the "Block additional file extensions for OLE embedding" policy setting. Block additional file extensions for OLE embedding This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ This policy setting allows you to specify additional file extensions that Office will block when they are embedded as an OLE package in an Office file by using the Object Packager control. By default, Office blocks certain file extensions. For a list of those file extensions, go to https://go.microsoft.com/fwlink/?linkid=847759. Important: Malicious scripts and executables can be embedded as an OLE package and can cause harm if clicked by the user. If you enable this policy setting, enter the additional file extensions to block, separated by semicolons. For example, py;rb. If you disable or don’t configure this policy setting, the default set of file extensions will be blocked. If you want to allow certain file extensions, enable the "Allow file extensions for OLE embedding" policy setting. Extensions added to this policy setting will take precedence over extensions in "Allow file extensions for OLE embedding" What's New Use shared computer activation This policy setting controls whether shared computer activation is used to activate the version of Office installed on the computer. By default, shared computer activation isn’t used for activation. Shared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). If you enable this policy setting, shared computer activation will be used to activate the version of Office installed on the computer. If you do not configure this policy setting, shared computer activation will not be used to activate the version of Office installed on the computer unless you have enabled shared computer activation by using the Office Deployment Tool. If you disable this policy setting, shared computer activation will not be used even if set using the Office Deployment Tool. Note: This policy setting only applies to subscription plans that include Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Use a device-based license for Microsoft 365 Apps for enterprise This policy setting controls whether Microsoft 365 Apps for enterprise uses a device-based license instead of a user-based license. Important: For eligibility requirements and configuration steps to use a device-based license with Microsoft 365 Apps for enterprise, see https://go.microsoft.com/fwlink/p/?linkid=2094216. If you enable this policy setting, Microsoft 365 Apps for enterprise will use a device-based license instead of a user-based license. If you disable or don’t configure this policy setting, Microsoft 365 Apps for enterprise will use a user-based license. Therefore, the user who signs in and activates Office must have an Office license. AutoSave [Deprecated] Don’t AutoSave files in Excel Important: This policy setting will be removed in a future release and will no longer be supported. Please use the "Turn off AutoSave by default in Excel" policy setting instead. This policy setting controls whether files can be AutoSaved in the desktop version of Excel after Excel has been updated with new features. By default, Auto Saving files is Enabled. If you enable this policy setting files will not be able to be AutoSaved. If you disable or don’t configure this policy setting files will be able to be AutoSaved. Note: There are separate policy settings for Word, Excel, and PowerPoint. [Deprecated] Don’t AutoSave files in PowerPoint Important: This policy setting will be removed in a future release and will no longer be supported. Please use the "Turn off AutoSave by default in PowerPoint" policy setting instead. This policy setting controls whether files can be AutoSaved in the desktop version of PowerPoint after PowerPoint has been updated with new features. By default, Auto Saving files is Enabled. If you enable this policy setting files will not be able to be AutoSaved. If you disable or don’t configure this policy setting files will be able to be AutoSaved. Note: There are separate policy settings for Word, Excel, and PowerPoint. [Deprecated] Don’t AutoSave files in Word Important: This policy setting will be removed in a future release and will no longer be supported. Please use the "Turn off AutoSave by default in Word" policy setting instead. This policy setting controls whether files can be AutoSaved in the desktop version of Word after Word has been updated with new features. By default, Auto Saving files is Enabled. If you enable this policy setting files will not be able to be AutoSaved. If you disable or don’t configure this policy setting files will be able to be AutoSaved. Note: There are separate policy settings for Word, Excel, and PowerPoint. Turn off AutoSave by default in Excel This policy setting allows you to turn off AutoSave by default in Excel. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online. If you enable this policy setting, AutoSave is off by default in Excel. But, the user can enable AutoSave for Excel by going to File > Options > Save. Or, the user can enable AutoSave for a specific Excel file by using the AutoSave toggle in the title bar. If you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Turn off AutoSave by default in PowerPoint This policy setting allows you to turn off AutoSave by default in PowerPoint. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online. If you enable this policy setting, AutoSave is off by default in PowerPoint. But, the user can enable AutoSave for PowerPoint by going to File > Options > Save. Or, the user can enable AutoSave for a specific PowerPoint file by using the AutoSave toggle in the title bar. If you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Turn off AutoSave by default in Word This policy setting allows you to turn off AutoSave by default in Word. AutoSave automatically saves all changes a user makes to files that are stored in OneDrive, OneDrive for Business, or SharePoint Online. If you enable this policy setting, AutoSave is off by default in Word. But, the user can enable AutoSave for Word by going to File > Options > Save. Or, the user can enable AutoSave for a specific Word file by using the AutoSave toggle in the title bar. If you disable or don’t configure this policy setting, AutoSave is on by default, but the user can disable AutoSave by going to File > Options > Save or by using the AutoSave toggle. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Use AutoSave Default Setting AutoSave Is On By Default AutoSave Is Off By Default Specify the location to save the licensing token used by shared computer activation This policy setting allows you to specify the file folder to save the licensing token used by shared computer activation. Shared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). By default, the licensing token used by shared computer activation is saved in the %localappdata%\Microsoft\Office\16.0\Licensing folder. But, this location isn’t included in the user’s roaming profile, so the licensing token won’t be available if the user signs in to a different computer. If you enable this policy setting, you need to specify a location to store the licensing token used by shared computer activation. You should specify a folder that is specific to the user and that will be available to the user from whatever computer on the network that the user signs in to. For example, a folder that’s included in the user’s roaming profile, or a shared folder on the network, where there is a folder for each user. If you disable or don’t configure this policy setting, Office uses the default folder to save the licensing token used by shared computer activation. Note: This policy setting only applies to subscription plans that include Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ Current Channel Current Channel (Preview) Monthly Enterprise Channel Semi-Annual Enterprise Channel Semi-Annual Enterprise Channel (Preview) Beta Channel Show additional sharing choices under the File tab This policy settings controls what is displayed when the user goes to File > Share in Word, Excel, or PowerPoint. By default, choosing File > Share takes the user to the Share dialog, which provides various choices for sharing. These choices used to appear under File > Share, but no longer appear there by default. There are some additional choices that used to appear under File > Share, but don’t appear in the Share dialog. If you enable this policy setting, the user isn’t taken to the Share dialog and the user sees all the sharing choices under File > Share. For example, several options to share by email or an option to share by instant message. If you disable or don’t configure this policy setting, choosing File > Share takes the user to the Share dialog, which doesn’t have all the sharing choices. Note: The user can also add buttons for these additional sharing choices to the ribbon or to the quick access toolbar, regardless of how this policy setting is configured. Use legacy translation features This policy setting allows you to use legacy translation features in Office apps, such as Word, instead of the Translator feature, which uses the cloud-based Microsoft Translator service. Legacy translation features include the following: - Translation of the entire document, by using the browser-based Bilingual Viewer. - Translation of selected text, by using the Research pane. - Translation of an individual word when hovering over the word, by using the Mini Translator. You may need to use legacy translation features in special cases that require extra configurability, such as when using customer translation providers. If you enable this policy setting, translation commands, such as those on the ribbon or in shortcut menus, will use the legacy translation features instead of the Translator feature. If you disable or don’t configure this policy setting, translation commands, such as those on the ribbon or in shortcut menus, will use the Translator feature instead of the legacy translation features. Note: This policy setting only applies to apps and subscription versions of Office, such as Microsoft 365 Apps for enterprise, that support the Translator feature. Show LinkedIn features in Office applications This policy setting will prevent LinkedIn features from appearing in the Office applications. If you enable or do not configure this policy, users will be able to leverage LinkedIn data and resources from a variety of locations within the Office applications. If you disable this policy setting, LinkedIn features will not be available. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ Open Office file links in Office Online This policy setting controls which version of Office opens when a hyperlink to an Office file stored on OneDrive, OneDrive for Business, or a SharePoint Online team site is selected. By default, a hyperlink to a file stored in one of these locations opens the file in the Office client version of Word, Excel, or PowerPoint. This is the version of Office that is installed on the user’s computer. If Office isn’t installed on the user’s computer, the file is opened in the Office Online version of the program in the user’s web browser. If you enable this policy setting, a hyperlink to an Office file stored in one of these locations opens the file in the Office Online version of Word, Excel, or PowerPoint. This opens the file in the user’s web browser. If you disable or don’t configure this policy setting, a hyperlink to an Office file stored in one of these locations opens the file in the Office client version of Word, Excel, or PowerPoint, if Office is installed on the user’s computer. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Save checked-out files to a local folder This policy setting allows users to save files checked out from SharePoint, or other document management server products, to a local folder when editing the files. By default, checked-out files are stored in the Office Document Cache. The Office Document Cache allows the same offline editing capabilities as a local folder, but automatically syncs the files when there is Internet connectivity. Note: It’s not recommended to enable this policy setting unless needed to support existing document management processes. If you enable this policy setting, users can specify a local folder to save checked-out files to by going to File > Options > Save > Offline editing options. If you disable or don’t configure this policy setting, checked-out files are stored in the Office Document Cache. Macro Runtime Scan Scope This policy setting specifies the behavior for both the VBA and Excel 4.0 (XLM) runtime scan features. Multiple Office apps support VBA macros, but XLM macros are only supported by Excel. Macros can only be scanned if the anti-virus software registers as an Antimalware Scan Interface (AMSI) provider on the device. If you enable this policy setting, you can choose from the following options to determine the macro runtime scanning behavior: - Disable for all files (not recommended): If you choose this option, no runtime scanning of enabled macros will be performed. - Enable for low trust files: If you choose this option, runtime scanning will be enabled for all files for which macros are enabled, except for the following files: - Files opened while macro security settings are set to “Enable All Macros” - Files opened from a Trusted Location - Files that are Trusted Documents - Files that contain VBA that is digitally signed by a Trusted Publisher - Enable for all files: If you choose this option, then low trust files are not excluded from runtime scanning. The VBA and XLM runtimes report to an antivirus system certain high-risk code behaviors the macro is about to execute. This allows the antivirus system to indicate whether or not the macro behavior is malicious. If the behavior is determined to be malicious, the Office application closes the session and the antivirus system can quarantine the file. If the behavior is non-malicious, the macro execution proceeds. Note: When macro runtime scanning is enabled, the runtime performance of affected VBA projects and XLM sheets may be reduced. If you disable this policy setting, no runtime scanning of enabled macros will be performed. If you don’t configure this policy setting, “Enable for low trust files” will be the default setting. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Disable for all documents Enable for low trust documents Enable for all documents Readiness Toolkit Allow add-in usage data to be generated and collected by the Readiness Toolkit This policy setting allows you to configure whether the Readiness Toolkit for Office generates and collects add-in usage data. The data generated and collected includes when the add-in is loaded and used, and if the add-in crashes. This information is available in reports provided by the Readiness Toolkit. If you enable this policy setting, the Readiness Toolkit generates and collects add-in usage data. If you disable or don't configure this policy setting, the Readiness Toolkit doesn't generate or collect add-in usage data. Specify custom labels to use with the Readiness Toolkit This policy setting allows you to specify up to four custom labels to categorize and filter data in reports created by the Readiness Toolkit for Office. Labels are available in reports that are based on scans of the most recently used Office documents and installed add-ins on the user’s computer. You can specify any string for the custom labels. For example, you can use a label to indicate the user’s department, title, or geographic location. When the Readiness Toolkit runs on the user’s computer, the custom labels are collected and are made available in the reports that are created. For example, you can filter the report to show only data from the Finance Department. Assign labels in a consistent manner, such as always using Label 1 for department. If you enable this policy setting, the custom labels that you specify will be available in reports created by the Readiness Toolkit. If you disable or don’t configure this policy setting, custom labels won’t be available in reports created by the Readiness Toolkit. Note: If you're using the Office Telemetry Dashboard and have already configured tags (labels), the Readiness Toolkit automatically collects those labels during its scan of the user's computer and will make them available in its reports. You don't need to enable this policy setting unless you want to specify different labels. Labels you specify for the Readiness Toolkit won't appear in the Office Telemetry Dashboard. Show the Custom tab as the default tab when creating a new file This policy settings controls whether the Custom tab shows as the default tab under File > New in Word, Excel, and PowerPoint. The Custom tab shows the custom templates that are available. If there aren’t any custom templates, the Custom tab can’t be shown. If you enable this policy setting, users will see the Custom tab as the default tab when creating a new file by going to File > New. If you disable or don’t configure this policy setting, users will see the Featured tab as the default tab when creating a new file by going to File > New, unless access to Office-provided templates has been disabled. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Enable Minimizing VBA Project Digital Signature Invalidation This policy setting allows you to reduce the number of actions in Office that will result in a document's VBA digital signature becoming invalidated. The VBA project may be modified in certain ways that change the project storage but that do not invalidate the source code digital signature. With this setting turned off, these actions will lead to the VBA digital signature being invalidated, and the signature dropped on save if the user does not have the private key available to resign. With this setting on, we will only perform a resign of the project if the source code signature has changed, and will keep the existing signature in other cases. If the VBA project storage is changed and saved, but the old signature retained under this feature, this can lead to an invalidation of the saved compiled VBA project state. If this happens, the VBA project will be forced to recompile each time the document is loaded. This may have negative performance impacts for larger VBA projects. Once a document is in this state, the state will persist until the VBA project is resigned. Disable VSTO 2003 and 2005 document-level customizations This policy setting allows you to configure the load behavior of Visual Studio Tools for Office (VSTO) 2003 and 2005 document-level customizations. If you enable this policy setting, VSTO 2003 and 2005 document-level customizations will not be loaded. If you disable or do not configure this policy setting, VSTO 2003 and 2005 document-level customizations will remain enabled. Use Viewer Mode This policy setting controls whether Office, Project, and Visio open in Viewer mode, which means the user can only view and print the contents of the file. Viewer mode, which is turned off by default, is intended for users who aren’t licensed for Office, Project, or Visio. If you enable this policy setting, Office, Project, and Visio will open in Viewer mode. Also, the Activate Product button under File > Account will be hidden. Note: If you enable this policy setting, you can’t use shared computer activation with Version 2204 and older. If you disable or don’t configure this policy setting, an unlicensed user will be prompted to activate Office, Project, or Visio each time they open the app. If the user doesn’t activate, the user can only view and print the contents of the file. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2205233. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Turn off Coming Soon This policy setting controls whether Coming Soon is available to users. Coming Soon provides information in an Office app, such as Word or Excel, about upcoming feature changes to that app and lets users try out those changes ahead of time. By default, Coming Soon is available to users. If you enable this policy setting, Coming Soon is turned off and isn't available to users. If you disable or don't configure this policy setting, Coming Soon is available to users. Take users to a custom File menu tab This policy setting controls whether users are taken to a custom menu tab when they choose the File menu in an Office app, such as Word or PowerPoint. A custom menu tab can be provided by an installed add-in. By default, when users choose the File menu, they are taken to one of the File menu tabs provided by Office, such as Home or Info. If you enable this policy setting, and an installed add-in provides a custom File menu tab, users will be taken to that custom tab when they choose the File menu. If you disable or don’t configure this policy setting, when users choose the File menu, users will be taken to one of the File menu tabs provided by Office, such as Home or Info. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Allow the use of connected experiences in Office This policy setting allows you to control whether connected experiences are available to your users when they're using Office. Connected experiences include experiences that analyze content, such as Editor in Word, experiences that download online content, such as PowerPoint QuickStarter, and other connected experiences, such as document co-authoring and online file storage. It also includes additional optional connected experiences, such as inserting an online video into a PowerPoint presentation or the 3D Maps feature in Excel, which uses Bing. See the Note at the end for more information about other policy settings that you can use to control these connected experiences. If you enable this policy setting, these connected experiences will be available to your users. If you disable this policy setting, these connected experiences won't be available to your users. Note: If you disable this policy setting, nearly all connected experiences will be turned off. However, limited Office functionality will remain available, such as synching a mailbox in Outlook. Essential services, such as the licensing service that confirms that you’re properly licensed to use Office, will also remain available. If you don't configure this policy setting, these connected experiences will be available to your users. Note: You can use these other policy settings if you want to disable just a certain group of connected experiences: "Allow the use of connected experiences in Office that analyze content", "Allow the use of connected experiences in Office that download online content", and "Allow the use of additional optional connected experiences in Office". For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085689 Level Connected Disconnected Allow the use of connected experiences in Office that analyze content This policy setting allows you to control whether connected experiences that analyze content are available to your users when they're using Office. PowerPoint Designer and Editor in Word are examples of connected experiences that analyze content. If you enable this policy setting, connected experiences that analyze content will be available to your users. If you disable this policy setting, connected experiences that analyze content won't be available to your users. If you don't configure this policy setting, connected experiences that analyze content will be available to your users. Note: If you disable the "Allow the use of connected experiences in Office" policy setting, conected experiences that analyze content won't be available to your users. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085794 Level: Enabled Disabled Allow the use of connected experiences in Office that download online content This policy setting allows you to control whether connected experiences that download online content are available to your users when they’re using Office. Office templates and PowerPoint QuickStarter are examples of connected experiences that download online content. If you enable this policy setting, connected experiences that download online content will be available to your users. If you disable this policy setting, connected experiences that download online content won’t be available to your users. If you don’t configure this policy setting, connected experiences that download online content will be available to your users. Note: If you disable the “Allow the use of connected experiences in Office” policy setting, connected experiences that download online content won’t be available to your users. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085688 Level: Enabled Disabled Allow the use of additional optional connected experiences in Office This policy setting allows you to control whether additional optional connected experiences are available to your users when they’re using Office. Additional optional connected experiences are offered by Microsoft directly to your users and are governed by terms other than your organization’s commercial agreement with Microsoft. Inserting an online video into a PowerPoint presentation or the 3D Maps feature in Excel, which uses Bing, are examples of additional optional connected experiences. Note: Even if you choose to make these additional optional connected experiences available to your users, your users will have the option to turn these additional optional connected experiences off as a group by going to File > Account > Account Privacy > Manage Settings. If you enable this policy setting, additional optional connected experiences will be available to your users. If you disable this policy setting, additional optional connected experiences won’t be available to your users. Note: Some additional optional connected experiences may be controlled by other policy settings instead of this policy setting. For more information, see the link below. If you don’t configure this policy setting, additional optional connected experiences will be available to your users. Note: If you disable the “Allow the use of connected experiences in Office” policy setting, additional optional connected experiences won’t be available to your users. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2085690 Level: Enabled Disabled Force Runtime AV Scan This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ This policy setting controls when Office files are scanned at runtime by an installed Anti-Virus software. Note, files will only be scanned if the Anti-Virus software registers as a provider for runtime scanning. If you enable this policy setting, Office applications will submit all files for a runtime scan by Antivirus. If you disable or do not configure this policy setting, Office will selectively submit certain files, for example encrypted files, for a runtime scan by Antivirus. Default Office theme This policy setting allows you to select the user interface (UI) theme used by Office, if the user has not already selected an Office theme. Note: This setting only applies to Version 1903 or later of Office. If you enable this policy setting, you may choose the Office theme used in cases where the user has not selected an Office theme themselves. If you disable or do not configure this policy setting, Office will use the Colorful theme in cases where the user has not selected an Office theme themselves. Regardless of how you configure this policy setting, users can change their Office theme by going to File > Account > Office Theme (or, in Outlook, by going to File > Office Account > Office Theme). Note: This policy setting takes precedence over the “Default Office theme” policy setting located under User Configuration. This policy setting allows you to select the user interface (UI) theme used by Office, if the user has not already selected an Office theme. Note: This setting only applies to Version 1903 or later of Office. If you enable this policy setting, you may choose the Office theme used in cases where the user has not selected an Office theme themselves. If you disable or do not configure this policy setting, Office will use the Colorful theme in cases where the user has not selected an Office theme themselves. Regardless of how you configure this policy setting, users can change their Office theme by going to File > Account > Office Theme (or, in Outlook, by going to File > Office Account > Office Theme). Note: The “Default Office theme” policy setting located under Computer Configuration takes precedence over this policy setting. Colorful Dark Gray Black White Use the Sensitivity feature in Office to apply and view sensitivity labels This policy setting controls whether sensitivity labels configured by an admin can be applied and viewed by using sensitivity labels in an Office app, such as Word. It applies only to subscription versions of Office, such as Microsoft 365 Apps for enterprise.​ This setting has been updated for newer versions of M365 Apps. For more information about this setting and how it applies to versions of M365 Apps, see https://go.microsoft.com/fwlink/p/?linkid=2207430. ​ For newer versions of M365 Apps:​ If you enable this policy setting, or don’t configure this policy setting, sensitivity labels that are built into Office apps can be used to apply and view sensitivity labels. If you disable this policy setting, sensitivity labels that are built into Office apps can’t be used to apply or view sensitivity labels. If the Microsoft Azure Information Protection unified labeling client is installed and you want to use the add-in from that client for labeling, you must also configure the policy setting "Use the Azure Information Protection add-in for sensitivity labeling".​ For prior versions:​ If you enable this policy setting, labels built into Office apps can be used to apply and view sensitivity labels. If the Microsoft Azure Information Protection unified labeling client is installed, we also recommend you block that client’s add-in from loading in Word, Excel, PowerPoint, and Outlook. If you disable this policy setting, or don’t configure this policy setting, labels built into Office apps can’t be used to apply and view sensitivity labels. If the Microsoft Azure Information Protection unified labeling client is installed, the add-in from that client can be used to apply and view sensitivity labels in Office apps. Use the Azure Information Protection add-in for sensitivity labeling This policy setting controls whether the Microsoft Azure Information Protection add-in can be used rather than the default of built-in labeling to view and apply sensitivity labels in Office apps. It applies only to subscription versions of Office, such as Microsoft 365 Apps for enterprise.​ If you enable this policy setting and the Microsoft Azure Information Protection unified labeling client is installed, the add-in from that client replaces the default labeling built into Office apps. If you disable this policy setting or don’t configure it, the default labeling experience that’s built-in for Office apps is used to view and apply sensitivity labels.​ For more information about this setting, see https://go.microsoft.com/fwlink/p/?linkid=2207430. Turn off roaming of on-premises file names and metadata This policy setting controls whether file names and metadata for Office files are roamed and appear in the list of recently opened files in an Office app, such as Word, on different devices. Roaming, which relies on a web-based Microsoft service, occurs when a user signs into Office with the same work or school account on different devices. Note: This policy setting only applies to Office files that are saved to on-premises instances of SharePoint Server or OneDrive for Business. If you enable this policy setting, file names and metadata won't roam and won’t appear in the list of recently opened files in Office apps on other devices, unless the file has been opened on that device. If you disable or don't configure this policy setting, file names and metadata will roam and will appear in the list of recently opened files in Office apps on other devices, even if the file hasn’t been opened on that device. Turn off roaming of file names and metadata by server domain Blocked Domains: This policy setting controls whether file names and metadata for Office files are roamed and appear in the list of recently opened files in an Office app, such as Word, on different devices. Roaming, which relies on a web-based Microsoft service, occurs when a user signs into Office with the same work or school account on different devices. Note: This policy is applied to any Office files stored on a specified list of server domains. The set of disallowed domains is a semicolon separated list: "*.contoso.com;service.microsoft.com". If you enable this policy setting, file names and metadata won't roam and won’t appear in the list of recently opened files in Office apps on other devices, unless the file has been opened on that device. If you disable or don't configure this policy setting, file names and metadata will roam and will appear in the list of recently opened files in Office apps on other devices, even if the file hasn’t been opened on that device. Show the option for Microsoft 365 Insider This policy setting controls whether the option for Microsoft 365 Insider is shown under File > Account in an app, such as Word. By showing this option, a user can choose to join or leave the Microsoft 365 Insider program. For more information about the Microsoft 365 Insider program, see https://insider.office.com. If you enable this policy setting, the option for Microsoft 365 Insider is shown under File > Account. Note: if you enable this policy setting, you shouldn’t enable and configure the “Update Channel” or the “Update Path” policy setting under Computer Configuration\Policies\Administrative Templates\Microsoft Office 2016 (Machine)\Updates. If you do, those policy settings will take precedence, even though the option for Microsoft 365 Insider is shown. If you disable this policy setting, the option for Microsoft 365 Insider is not shown under File > Account. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Control how Office handles form-based sign-in prompts This policy setting controls how Office applications handle form-based sign-in prompts.​ If you enable this policy setting, you must choose one of the following options:​ Block all prompts​ Ask the user what to do for each new host​ Show prompts only from allowed hosts​ If you select “Block all prompts” then no form-based sign-in prompts are shown to the user and the user is shown a message that the sign-in method isn’t allowed.​ If you select “Ask the user what do for each new host” then the user is asked for each new host whether the user wants to sign-in to the host. If the user has previously signed-in to a host, a form-based sign-in prompt is shown for that host. Also, form-based sign-in prompts are shown for any hosts specified by the “Specify hosts allowed to show form-based sign-in prompts to users” setting. If you select “Show prompts only from allowed hosts” then form-based sign-in prompts are shown only from hosts that have been specified by the additional “Specify hosts allowed to show form-based sign-in prompts to users” setting. Form-based sign-in prompts from all other hosts are blocked and the user is shown a message that the sign-in method isn’t allowed. Note: If you don’t configure the “Specify hosts allowed to show form-based sign-in prompts to users” setting or don’t specify any hosts in that setting, then the behavior of the “Show prompts only from allowed hosts” option will be the same as if you selected the “Block all prompts” option. If you disable or don’t configure this policy setting, all form-based sign-in prompts are blocked and the user is shown a message that the sign-in method isn’t allowed. But users are able to change the behavior for form-based sign-in prompts by going to File > Options > Trust Center > Trust Center Settings > Form-based sign-in. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​ Block all prompts Ask the user what to do for each new host Show prompts only from allowed hosts Allow VBA to load typelib references by path from untrusted intranet locations This policy setting permits VBA to load typelib references by explicit path read from the project data if that path points to an intranet location that is not explicitly in the system trusted sites list. By default, VBA will attempt to load typelibs referenced in a project by searching for the library GUID in the registry. If it is not found in the registry, VBA will attempt to load the typelib or project reference using the path stored in the project for the reference as long as the reference does not point to an internet or intranet location that is not in the trusted sites list. If you enable this policy setting, VBA will treat intranet paths like local machine paths, and therefore VBA will attempt to search for unregistered references in intranet locations that are not local machine or in the system's trusted sites list. If you disable or don’t configure this policy setting, VBA maintains its default behavior and will refuse to load typelibs on intranet paths if it does not find the typelib registered in HKEY_CLASSES_ROOT. Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine This policy setting restricts VBA to checking project library references only against the registry and trusted zones. By default VBA performs additional checks against library paths to prevent loading references from potentially unsafe locations on the local machine as well. It is recommended that this setting remain 0 or unset to allow for the more secure default behavior. Only enable this setting if the default behavior is causing compatibility issues with critical solutions, and then, only to provide time to migrate the solutions to address the less secure behavior, at which point the setting should be turned off again. Show in-product notifications for the Microsoft Workplace Discount Program This policy setting controls whether notifications about the Workplace Discount Program (previously named the Home Use Program) are displayed to end-users in Office applications. If you enable this policy setting, Office will occasionally notify end-users if they are eligible to purchase an Office subscription for their personal use at a discount via the Microsoft Workplace Discount Program. End-users can permanently opt-out of these notifications at any time using a button within the notification. If you disable this policy setting, Office will not display any notifications related to the Microsoft Workplace Discount Program. If you don't configure this policy setting, Microsoft will control whether or not these notifications appear. Please check the Message Center in the Microsoft 365 admin center for updates on whether this feature has been enabled by Microsoft yet and the default setting for the notifications. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2202543. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. Only trust VBA macros that use V3 signatures This policy setting controls whether only VBA macros that use V3 signatures can be trusted and run in the application. If you enable this policy setting, only VBA macros that use V3 signatures can be trusted and run in the application. If you enable this policy setting, we also recommend that you enable the “VBA Macro Notification Settings” policy setting for the application and then select the “Disable all except digitally signed macros” option. Note: Before enabling this policy setting, you should upgrade your existing VBA macros to use V3 signatures. If you disable or don’t configure this policy setting, VBA macros signed with legacy signature schemes can be trusted and run in the application. Show the Update Channel option to allow users to select an update channel This policy setting controls whether the Update Channel option is shown under File > Account in an app, such as Word. This option allows users to select which update channel they want to receive updates from. For more information about update channels, see https://go.microsoft.com/fwlink/p/?linkid=846105. If you enable this policy setting, the Update Channel option is shown under File > Account. You need to select which update channels will be shown as options to the user. Important: - Users must be a local administrator on the device to change to a different update channel. - Beta Channel is not a supported update channel. It should only be used in test environments and by a small group of select users, such as IT staff or application developers. If you disable or don’t configure this policy setting, the Update Channel option is not shown under File > Account. Notes: - This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. - This policy setting takes precedence over the “Show the option for Microsoft 365 Insider” policy setting in cases where both policy settings are enabled. - If you enable this policy setting, you shouldn’t enable and configure the “Target Version”, “Update Channel”, or “Update Path” policy settings under Computer Configuration\Policies\Administrative Templates\Microsoft Office 2016 (Machine)\Updates. If you do, those policy settings will take precedence. The Update Channel option will still appear under File > Account, but it will be disabled and the user won’t be able to select an update channel. Automatically generate alternative text (alt text) for pictures This policy setting controls whether alternative text (alt text) is generated automatically for pictures in Word, PowerPoint, and Outlook. This policy setting is related to the "Automatically generate alt text for me" check box under File > Options > Ease of Access > Automatic Alt Text. If you enable this policy setting, alt text will be generated automatically for pictures. The "Automatically generate alt text for me" check box will be selected and users won't be able to clear the check box. If you disable this policy setting, alt text won't be generated automatically for pictures. The "Automatically generate alt text for me" check box won't be selected and users won't be able to select the check box. If you don't configure this policy setting, alt text will be generated automatically for pictures. But, users will be able to clear the "Automatically generate alt text for me" check box. Show recommended files on the File tab or start page This policy setting allows you to control whether users see a list of recommended files on the File tab or start page in Word, Excel, and PowerPoint, on devices running Windows. If you enable this policy setting, users will see a list of recommended files on the File tab or start page. If you disable this policy setting, users won't see a list of recommended files on the File tab or start page. If you don't configure this policy setting, users will see a list of recommended files on the File tab or start page. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2146780. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise. Allow specified hosts to show Basic Authentication prompts to Office apps This policy setting allows you to specify which hosts can show Basic Authentication sign-in prompts to Office apps. By default, all Basic Authentication sign-in prompts are blocked, and the user is shown a message that the sign-in method isn’t allowed. If you enable this policy setting, you need to enter the hosts by name, separating the host names with a semi-colon. For example: server1.contoso.com; server2.fabrikam.com. Warning: Allowing Basic Authentication sign-in prompts isn’t recommended because it’s a security risk. Basic Authentication sign-in prompts from all other hosts will be blocked and the user will be shown a message that the sign-in method isn’t allowed. If you disable or don’t configure this policy setting, all Basic Authentication sign-in prompts will be blocked, and the user will be shown a message that the sign-in method isn’t allowed. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2199001. Allow Basic Authentication prompts from network proxies This policy setting controls whether network proxies are allowed to show Basic Authentication prompts. By default, all Basic Authentication sign-in prompts are blocked, and the user is shown a message that the sign-in method isn’t allowed. If you enable this policy setting, then network proxies will be allowed to show Basic Authentication prompts. Warning: Allowing Basic Authentication sign-in prompts isn’t recommended because it’s a security risk. If you disable or don’t configure this policy setting, all Basic Authentication sign-in prompts from network proxes will be blocked, and the user will be shown a message that the sign-in method isn’t allowed. Note: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2199001. This policy controls which browser will open web links from within supported Microsoft 365 apps. By default, web links will open in Microsoft Edge. Note: This policy doesn’t override any user settings or policies that specify that document links should open in the desktop apps instead of their web app counterparts. If you enable this policy, you can choose either “System default browser” or a specific browser, such as “Microsoft Edge.” “System default browser” refers to the browser setting specified on the user’s Windows device. If you disable or don’t configure this policy, web links will open in Microsoft Edge. The user can set their preferred browser from the settings for the specific Microsoft 365 app. For more information, see https://go.microsoft.com/fwlink/p/?linkid=2224834. Links Choose which browser opens web links System default browser Microsoft Edge groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe groove.exe excel.exe mspub.exe powerpnt.exe pptview.exe visio.exe winproj.exe winword.exe outlook.exe spDesign.exe exprwd.exe msaccess.exe onent.exe mse7.exe Allow xx full downloads per 13hr period Allow xx incremental downloads per 13hr period Allow xx manual OAB downloads per 13hr period Custom string to be displayed: Destination URL ScreenTip Languages location: Disallow in Word Disallow in Excel Disallow in PowerPoint Disallow in Access Disallow in Outlook Disallow in SharePoint Designer Disallow in Publisher Disallow in Project Disallow in Visio Disallow in OneNote Disallow in InfoPath Disallow in SharePoint Workspace Disallow in Word Disallow in Excel Disallow in PowerPoint Disallow in Access Disallow in Outlook Disallow in SharePoint Designer Disallow in Publisher Disallow in Project Disallow in Visio Disallow in OneNote Disallow in InfoPath Disallow in SharePoint Workspace Disallow in Word Disallow in Excel Disallow in PowerPoint Disallow in Access Disallow in Outlook Disallow in Publisher Disallow in Project Disallow in Visio Disallow in InfoPath Menu animations Automatic Discovery Name: URL: Name: URL: Name: URL: Name: URL: Name: URL: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Name: Path: Microsoft Access Microsoft Excel Microsoft SharePoint Designer Microsoft InfoPath Microsoft OneNote Microsoft Outlook Microsoft PowerPoint Microsoft Project Microsoft Publisher Microsoft Visio Microsoft Word List of Approved Locations: Enter the name of the Location as Value Name, and path as the Value. More Actions URL: Check for new actions URL Leave field blank to disable the 'More actions...' button Enforce CSS CSS setting for Word This will be forced on if 'Use long file names' is forced off. Screen size Pixels per inch Always save Web pages in the default encoding. Save this document as Online content options Conversion service options Service Level Options Type of diagnostic data: Connected experiences in Office Connected experiences in Office that analyze content Connected experiences in Office that download online content Optional connected experiences in Office In seconds Minimum password length in milliseconds Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Path: Allow sub folders: Certificate Hash: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: Path: Date: Description: Allow sub folders: URL: Encryption type: Encryption type: IRM Encryption Mode: ActiveX Control Initialization: Load Controls in Forms3: Set the Automation Security level Disable XPS printing Disable PDF printing Disable Local printing Disable Network printing Clipboard behavior setting. Clipboard content options. Pre-Create Window (days): Workgroup path: Path: User path: User templates path Workgroup templates path Enterprise templates path Shared themes path User queries path (Enclose path in double quotes) Web Query dialog box home page URL: URL: Display menus and dialog boxes in Display help in Primary Editing Language Base URL Enter the URL followed by a question mark (?). Or, to include custom parameters, enter the URL, a question mark, your query string, and then an ampersand (&&). Default button text List of error messages to customize Enter error ID for Value Name and custom button text for Value Default save prompt text Tooltip for disabled toolbar buttons and menu items Location: Graph gallery path Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: Label: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: AD Attribute: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: MAPI Property: Only containing an attachment Only containing a link To insert the link, use '|0'. With a link and an attachment To insert the link, use '|0'. With a simple Web discussions link Use '|1' to insert the discussion server and '|2' to insert the URL. With a simple Web discussions link and an attachment Use '|1' to insert the discussion server and '|2' to insert the URL. With a Web discussions link Use '|1' to insert the discussion server and '|2' to insert the URL. With a Web discussions link and an attachment Use '|1' to insert the discussion server and '|2' to insert the URL. With a simple Web discussions link Use '|1' to insert the discussion server and '|2' to insert the URL. With just a simple Web discussions link Use '|0' to insert the link. With just an attachment With a Web discussions link Use '|1' to insert the discussion server and '|2' to insert the URL. Max number of documents being reviewed using 'send for review' Registry keys used to track document reviews will be reused when this limit is exceeded. Max number of documents being reviewed using ad hoc review Registry keys used to track document reviews will be reused when this limit is exceeded. Default subject for a review request To insert the name of the document, use '|0'. in milliseconds: This results in smaller files, but is not supported in Windows Internet Explorer 5.0 or earlier. Web Archive encoding Use 8 bit content-transfer-encoding: Results in smallest possible files, but not safe for attaching to e-mail applications. Use 8 bit only for encoding text parts: Results in a smaller file that can be sent in all known e-mail applications, but does not conform to RFC 2557. Default format for 'Publish' PowerPoint: web page format compatibility (in minutes) (in minutes) Field identification letters: Field identification letters: Enter a URL Check to specify a custom URL or e-mail address Specify URL/Email address: Enter timeout in seconds: Enter Permission Policy Default Server for Quick Access Toolbar Last-used signature image directory: Enter a website starting with http:// Bytes: Error Severity Level Refresh frequency limit (minutes) Sleep interval upper limit (minutes) Maximum number of retries Maximum retry interval (minutes) Time before query timeout (minutes) Query instances limit Cleanup interval (minutes) Errors cleanup interval (minutes) Default number of instances returned Maximum number of instances returned Database default timeout (milliseconds) Database maximum timeout (milliseconds) Web service default timeout limit (milliseconds) Web service maximum timeout limit (milliseconds) Web service default size limit (KB) Web service maximum size limit (KB) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Name of the workflow to be shown to the user Full URL to the document library with which the workflow is associated Description of the workflow to be shown to the user Name of the document library to be shown the user Workflow requires the user to sign the document (Word/Excel only) Path: Most Recently Used Template List Length Web Folders: Managing pairs of Web pages and folders This setting prevents the New File task pane from being dismissed automatically after creating a new file or opening an existing file. Setting this policy also disables the Check for Updates menu and task pane items. Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): Name: Service URL: Description (optional): Information URL (optional): Service agreement URL (optional): Server Capabilities flags: Server Major Version: Server Minor Version: Create Shared Notes Shared Notes Url (optional): Shared Notes Default Url (optional): UNC path to store Office telemetry data: Tag 1: Tag 2: Tag 3: Tag 4: Office document files Office template files COM add-ins Application-specific add-ins Web Add-ins Word-related solutions Excel-related solutions PowerPoint-related solutions Outlook-related solutions Access-related solutions Project-related solutions Publisher-related solutions Visio-related solutions OneNote-related solutions Block signing into Office Location for updates: Update version: Block version: Channel Name: Deadline: Days: Use Office CDN (if needed) Location of Office Deployment Tool: Online Storage Filter Value: Folder location: File extensions: File extensions: Label 1: Label 2: Label 3: Label 4: List of file extensions to block: To specify more than one file format, file extensions should be separated by a semi-colon. Theme: Behavior: Specify hosts allowed to show form-based sign-in prompts to users: If you select "Show prompts only from allowed hosts", you need to enter the hosts by name, separating the host names with a semi-colon. For example:​ ​ contoso.com;fabrikam.com​ ​ Important: You should only include hosts that you know and trust.​ Number of days Number of days Percent of disk space Number of days Beta Channel Current Channel (Preview) Current Channel Monthly Enterprise Channel Semi-Annual Enterprise Channel (Preview) Semi-Annual Enterprise Channel Disallowed Domains: Host names: Browser: