🚀 Overview
In enterprise environments, IT administrators frequently rely on Group Policy Objects (GPOs) to streamline the user interface and restrict access to specific configuration settings within the Microsoft Office Suite. A known technical limitation exists in Microsoft Outlook 2010 and Microsoft Outlook 2013 where certain commands located in the “Backstage” view—specifically under the File > Info section—cannot be disabled using standard administrative templates or registry-based policy enforcement. Despite correctly configuring the “Disable items in user interface” settings, the targeted controls remain active and accessible to end-users.
⚙️ Key Technical Details
The standard administrative procedure for disabling Ribbon or Backstage elements involves populating a list of Control IDs within the Windows Registry. Under normal circumstances, the following registry paths are utilized to enforce these restrictions:
- Outlook 2010:
HKEY_CURRENT_USER\software\Policies\Microsoft\Office\14.0\Outlook\DisabledCmdBarItemsList - Outlook 2013:
HKEY_CURRENT_USER\software\Policies\Microsoft\Office\15.0\Outlook\DisabledCmdBarItemsList
Administrators typically create a new String value named TCIDx (where x is a sequential integer) and assign it the specific ID of the control they wish to suppress. However, for the specific items listed below, this mechanism fails to hide the controls in the Info section:
| Control Description | Policy ID (TCID Value) |
|---|---|
| Add Account | 20100 |
| Account Settings | 6863 |
| Delegate Access | 20103 |
| Download Address Book | 5658 |
| Prepare for Offline Use | 20300 |
| Automatic Replies | 5621 |
| Empty Deleted Items Folder | 1671 |
🛡️ Resolution and Exceptions: While most of these controls remain unfixable in Outlook 2010 and 2013 due to architectural limitations in those versions, Microsoft released a targeted update for the “Empty Deleted Items Folder” control. To successfully disable this specific item (ID 1671) in Outlook 2010, the March 10, 2015 update (KB2956203) must be deployed to the client workstations.
⚠️ Impact
For IT Administrators, this issue means that certain “Info” tab features cannot be fully hardened or hidden through traditional GPO methods. This may lead to the following challenges:
- Security & Governance: Users may still access “Account Settings” or “Delegate Access,” potentially allowing unauthorized manual configuration of mail profiles.
- Support Overhead: The inability to hide “Add Account” or “Automatic Replies” may result in increased help desk tickets if users inadvertently modify their mailbox configuration.
- UI Inconsistency: Admins attempting to create a “locked-down” kiosk or simplified environment will find the Backstage view remains cluttered with these non-removable options.
If you are managing modern deployments, it is worth noting that these limitations are primarily confined to the legacy 2010 and 2013 versions of the Outlook client. For those remaining on these versions, alternate methods (such as third-party UI masking or user training) may be required where registry policies fail.
Official Source: Read the full article on Microsoft.com