SOLVED: How To Disable GET ADD-INS Button in Outlook

Outlook Get Add-Ins ButtonIf you want to retain control over what your staff can install you will need to disable the GET ADD-INS button in Outlook.  Unfortunately there is no  ready made GPO toggle GET ADD-INS off.

To give you a false sense of security, there is a setting in the Office 365 Exchange Management Console to disable “User owned Apps and Services” with options for “Let people in your organization go to the Office Store” and “Let users install trial apps and services”.  However, all that does it block access to the Office Store when staff surf directly to the web page STORE.OFFICE.COM and try to install something.  It does not disable the GET ADD-INS button and it does not stop users from installing add-ins.

sorry, office365 has been configured to prevent individual acquisition of office store addins - office store apps - user owned apps and services Disable User Owned Apps and Services O365 Settings

After digging through many posts and suggestions I gave up and worked with Microsoft support for about a week.  Eventually, they came up with a registry entry that functions.  I have tested in on both Outlook 2016 and 2019.

COMMAND LINE:

reg add HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\Webext /v StoreButtonInRibbonHomeTabAllowed /t reg_dword /d 0 /f

GROUP POLICY:

  1. GPO to disable remove the GET ADD-INS button in OutlookLaunch Group Policy Management Console (GPMC)
  2. Create a new GPO or edit an existing one
  3. Expand USER CONFIGURATION > PREFERENCES > WINDOWS SETTINGS > REGISTRY
  4. Right click in the blank space in the REGISTRY pane and select NEW > REGISTRY ITEM
  5. Set ACTIONS to UPDATE
  6. Set HIVE to HKEY_CURRENT_USER
  7. Set KEY PATH to Software\Microsoft\Office\16.0\Outlook\Options\Webext
  8. Set VALUE NAME to StoreButtonInRibbonHomeTabAllowed
  9. Set VALUE TYPE to REG_DWORD
  10. Set VALUE DATA to 0 (zero) and click OK to finish

Close Outlook and force a replication use GPUDATE /FORCE (not as an Admin because this is a local user) or reboot and you will see that the GET ADD-INS button is not just disabled, it is removed all together.  Note that we have noticed that the first time Outlook is started it takes an extra minute or two, which is very strange but acceptable.

 

Comments

  1. Avatar
    Taylor Harris August 5, 2019 at 12:04 pm

    This is not currently accurate information, as Microsoft’s Office 2016/2019/365 ADMX templates DO have a policy setting that controls exactly the registry key and option mentioned in this article. The policy setting is labeled: “Hide the Office Store button”.

    I just downloaded the templates today and found it in the included Excel documentation. In addition to hiding the Store button from the Home ribbon, it also hides the “Get more apps” recommendation in the Action Items toolbar that appears at the top of messages.

    • Ian Matthews
      Ian Matthews August 6, 2019 at 2:37 pm

      There are actually three places to disable GET ADD-INS. 1: website 2: Outlook 3: OWA. I am still working on OWA with MS Partner Support and hope to have a complete doc ready in few days.

Leave a Reply