Support tip: Several Office settings in Settings catalog may need parent settings enabled

We recently identified several Office settings in the settings catalog that, when enabled, do not automatically enable the required parent setting. This can lead to the policy not applying as expected if you did not configure the parent setting.

 

To help identify which configuration settings have this behavior, we recently made a user interface (UI) change to mark them as (deprecated) in the Settings catalog (preview) page. See the full list below.

 

We will soon release new device configuration settings (with the same name) that will automatically enforce the dependencies. 

 

What actions do I need to take?

Check your device configuration profiles to see if you are using a deprecated setting and if the parent setting is enabled. If the parent setting is not enabled, update your profiles to configure the parent setting and ensure the child setting works as expected.

After we release the replacement settings, you can update your configuration profile to use the new setting instead. 

 

List of settings by category

Category	Setting
Microsoft Excel 2016\Excel Options\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins and block them (User)
Microsoft Outlook 2016\Outlook Options\Other\Advanced	Do not allow Outlook object model scripts to run for shared folders (User)
	Do not allow Outlook object model scripts to run for public folders (User)
	Use Unicode format when dragging e-mail message to file system (User)
Microsoft Outlook 2016\Security	Allow Active X One Off Forms (User)
	Prevent users from customizing attachment security settings (User)
Microsoft Outlook 2016\Security\Automatic Picture Download Settings	Include Internet in Safe Zones for Automatic Picture Download (User)
Microsoft Outlook 2016\Security\Cryptography	Minimum encryption settings (User)
	Signature Warning (User)
Microsoft Outlook 2016\Security\Cryptography\Signature Status dialog box	Retrieving CRLs (Certificate Revocation Lists) (User)
Microsoft Outlook 2016\Security\Security Form Settings\Attachment Security	Allow users to demote attachments to Level 2 (User)
	Display Level 1 attachments (User)
	Remove file extensions blocked as Level 1 (User)
	Remove file extensions blocked as Level 2 (User)
Microsoft Outlook 2016\Security\Security Form Settings\Custom Form Security	Allow scripts in one-off Outlook forms (User)
	Set Outlook object model custom actions execution prompt (User)
Microsoft Outlook 2016\Security\Security Form Settings\Programmatic Security	Configure Outlook object model prompt when reading address information (User)
	Configure Outlook object model prompt when accessing an address book (User)
	Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (User)
	Configure Outlook object model prompt when responding to meeting and task requests (User)
	Configure Outlook object model prompt when executing Save As (User)
	Configure Outlook object model prompt when sending mail (User)
Microsoft Outlook 2016\Security\Trust Center	Allow hyperlinks in suspected phishing e-mail messages (User)
	Security Level (User)
Microsoft Outlook 2016\Account Settings\Exchange	Enable RPC encryption (User)
Microsoft Outlook 2016\Outlook Options\Preferences\Junk E-mail	Junk E-mail protection level (User)
Microsoft Outlook 2016\Account Settings\Exchange	Authentication with Exchange Server (User)
Microsoft PowerPoint 2016\PowerPoint Options\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins and block them (User)
Microsoft Project 2016\Project Options\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins and block them (User)
Microsoft Publisher 2016\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins (User)
Microsoft Word 2016\Word Options\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins and block them (User)
Microsoft Visio 2016\Visio Options\Security\Trust Center	Disable Trust Bar Notification for unsigned application add-ins and block them (User)

 

We will update this post when the new settings have been released. If you have any questions or comments, reply to this post or reach out to @IntuneSuppTeam on Twitter. 

Posted at https://sl.advdat.com/3H4liVEhttps://sl.advdat.com/3H4liVE