MAPI Access

Enable MAPI (Outlook) access to mailbox.

Adding a baselineAdd, configure or remove a single baseline on a tenant, a user or a group, without deploying a whole scheme.→

Configure it

This baseline applies per user, through a user-level scheme or an Azure group, rather than to the tenant as a whole.

1. Add it directly to a user or an Azure group (Adding a baseline), or bundle it into a user-level scheme and deploy that to many users or groups at once (Deploying a scheme). See Groups and priority for how Octiga resolves which value a user gets when a Direct value, a scheme and a group all supply one.

2. Leave MAPI access set to On; it’s the only setting on this baseline. It controls whether Outlook desktop (Windows or Mac) can connect to the mailbox. With it off, the user can still reach their mail through Outlook on the web, IMAP or POP3 if those stay enabled, but not through the Outlook desktop app.

3. Save. Turn on Auto-remediation and Octiga switches MAPI access back on automatically if it’s disabled for a user it applies to.

Check it worked

Passing means the mailbox’s MAPI access reports as enabled. Check it in the Exchange admin centre under Recipients → Mailboxes → the user → Manage email apps settings, where it appears as “Outlook desktop (MAPI)”. On the user roster or a group’s member list, Passing shows as a green dot for this baseline; Deviated (red) means MAPI is currently off; Excluded (grey) means the user or tenant isn’t licensed for Exchange Online. With access off, Outlook desktop can’t connect to the user’s mailbox and shows a connection error until access is restored.

Doing this for every tenant?

Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time.

Deploying a scheme→