# MAPI Access

> Enable MAPI (Outlook) access to mailbox.

Enable MAPI (Outlook) access to mailbox.

[Adding a baseline](https://docs.octiga.io/baselines/adding-a-baseline/) — Add, configure or remove a single baseline on a tenant, a user or a group, without deploying a whole scheme.

## Configure it

This baseline applies per user, through a user-level scheme or an Azure group, rather than to
the tenant as a whole.

1. Add it directly to a user or an Azure group ([Adding a baseline](https://docs.octiga.io/baselines/adding-a-baseline/)), or
   bundle it into a user-level scheme and deploy that to many users or groups at once
   ([Deploying a scheme](https://docs.octiga.io/baselines/deploying-a-scheme/)). See [Groups and priority](https://docs.octiga.io/baselines/groups-and-priority/) for how
   Octiga resolves which value a user gets when a Direct value, a scheme and a group all
   supply one.
2. Leave **MAPI access** set to On; it's the only setting on this baseline. It controls
   whether Outlook desktop (Windows or Mac) can connect to the mailbox. With it off, the
   user can still reach their mail through Outlook on the web, IMAP or POP3 if those stay
   enabled, but not through the Outlook desktop app.
3. Save. Turn on **Auto-remediation** and Octiga switches MAPI access back on automatically
   if it's disabled for a user it applies to.

## Check it worked

Passing means the mailbox's MAPI access reports as enabled. Check it in the Exchange
admin centre under **Recipients → Mailboxes** → the user → **Manage email apps settings**,
where it appears as "Outlook desktop (MAPI)". On the user roster or a group's member list,
Passing shows as a green dot for this baseline; Deviated (red) means MAPI is currently off;
Excluded (grey) means the user or tenant isn't licensed for Exchange Online. With access
off, Outlook desktop can't connect to the user's mailbox and shows a connection error until
access is restored.

**Doing this for every tenant?** Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time. [Deploying a scheme](https://docs.octiga.io/baselines/deploying-a-scheme/)