Force Outlook 2010 to ask for credentials via group policy?

Question

Setting: Exchange 2010 backend and the clients are on Outlook 2010

Goal: Force Outlook 2010 to always prompt for logon credentials via group policy, login script, etc.

What I know so far I know that Outlook has this functionality (can be found in More settings, Security tab) via a checkbox that says "Always prompt for logon credentials." The idea is that I want to have that be checked on every machine for every user, every time. I have run Process Monitor and looked at all the registry keys that Outlook accesses when making the checkbox change, but it seems like its a per user basis (not scriptable)

Hopes and dreams That someone has narrowed down a specific reg entry that can be modified to always prompt, or that someone has already written a script that forces that checkbox to autocheck itself.

Solution 1

The value you want is PromptForCredentials, and it is seemingly stored in HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security, according to this forum post.

However, this Microsoft KB article and another answer in the above forum post suggest it should be in HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0\Outlook\Security. (Note the addition of the Policies key under Software.) So you may have to test both keys to find out which one it really is.

Regardless, since you want to always prompt for credentials, you would set PromptForCredentials to one (1).

Solution 2

To force Outlook to login once, which is what I needed:

Go to Start -> Control Panel-> Credentials manager -> Generic Credentials-> There will be few entries, select each and select option 'Remove from Vault'.

Restart your PC. Start Outlook and you will be prompted for your credentials.

Comments

[Oliver Salzburg]

Setting the DWORD inside the key KEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0\Out‌​look\Security (with Policies) has the desired effect. The other key doesn't.

[Oliver Salzburg]

@PatrickS.: You're right, I verified your answer and from what it seems, none of the templates sets PromptForCredentials, so they will not be useful in this case. I still consider the templates a useful piece of information in this context and, thus, would like to keep the answer.

[Patrick Seymour]

No argument from me. I try to use GPO templates first. Much easier for other admins to see what you've done and change if needed.