SOLVED: How To Disable GET ADD-INS Button in Outlook

If you want to retain control over what your staff can install you will need to disable the GET ADD-INS button in Outlook.  Unfortunately there is no  ready made GPO toggle GET ADD-INS off.

To give you a false sense of security, there is a setting in the Office 365 Exchange Management Console to disable “User owned Apps and Services” with options for “Let people in your organization go to the Office Store” and “Let users install trial apps and services”.  However, all that does it block access to the Office Store when staff surf directly to the web page STORE.OFFICE.COM and try to install something.  It does not disable the GET ADD-INS button and it does not stop users from installing add-ins.

After digging through many posts and suggestions I gave up and worked with Microsoft support for about a week.  Eventually, they came up with a registry entry that functions.  I have tested in on both Outlook 2016 and 2019.

COMMAND LINE:

reg add HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\Webext /v StoreButtonInRibbonHomeTabAllowed /t reg_dword /d 0 /f

GROUP POLICY:

  1. Launch Group Policy Management Console (GPMC)
  2. Create a new GPO or edit an existing one
  3. Expand USER CONFIGURATION > PREFERENCES > WINDOWS SETTINGS > REGISTRY
  4. Right click in the blank space in the REGISTRY pane and select NEW > REGISTRY ITEM
  5. Set ACTIONS to UPDATE
  6. Set HIVE to HKEY_CURRENT_USER
  7. Set KEY PATH to Software\Microsoft\Office\16.0\Outlook\Options\Webext
  8. Set VALUE NAME to StoreButtonInRibbonHomeTabAllowed
  9. Set VALUE TYPE to REG_DWORD
  10. Set VALUE DATA to 0 (zero) and click OK to finish

Close Outlook and force a replication use GPUDATE /FORCE (not as an Admin because this is a local user) or reboot and you will see that the GET ADD-INS button is not just disabled, it is removed all together.  Note that we have noticed that the first time Outlook is started it takes an extra minute or two, which is very strange but acceptable.

 

View Comments

  • While the current Outlook 2016 ADMX does now include a policy for setting this reg key (removing from the Main ribbon), "Office Add-ins" is still available and not greyed out under the Message ribbon of email messages. If you open a new email, you will still see "Office Add-ins" button still available and useable. This appears to be a major oversite from Microsoft on this policy.

  • Thank you very much for this article. I was searching for this for a long time and nearly gave up, but this registry entry is exactly what I needed. *twothumbsup*

  • Is there a way to only allow admin-managed add-ins? The user should be able to see "get Add-ins" but should not be able to get Add-ins from the store.

  • This is not currently accurate information, as Microsoft's Office 2016/2019/365 ADMX templates DO have a policy setting that controls exactly the registry key and option mentioned in this article. The policy setting is labeled: "Hide the Office Store button".

    I just downloaded the templates today and found it in the included Excel documentation. In addition to hiding the Store button from the Home ribbon, it also hides the "Get more apps" recommendation in the Action Items toolbar that appears at the top of messages.

    • There are actually three places to disable GET ADD-INS. 1: website 2: Outlook 3: OWA. I am still working on OWA with MS Partner Support and hope to have a complete doc ready in few days.

Published by
Ian Matthews

This website uses cookies.