check before: 2025-06-01
Product:
Entra, Exchange, Microsoft 365 Apps, Microsoft 365 for the web, Outlook, Windows
Platform:
Online, US Instances, Web, World tenant
Status:
Change type:
Admin impact, Updated message, User impact
Links:
Details:
Summary:
Microsoft updated guidance on disabling Outlook for the web without affecting Outlook for Windows. Admins can use Conditional Access policies to block Outlook for the web while keeping Outlook for Windows enabled. No policy changes or preparation are needed; updated support articles provide detailed instructions.
Details:
Updated July 28, 2025: We have updated the content, timeline, and additional resources.
We are changing the recommended method for disabling Outlook for the web so that users can continue to access the new Outlook for Windows.
[When this will happen:]
There is no change that is rolling out. We have published a new support article with instructions on how to use our existing infrastructure to block users from access Outlook for the web without impacting Outlook for Windows.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2024-11-01
updated:
2025-07-29
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Blocking Outlook for the web
Users will be unable to access Outlook for the web, which may disrupt their workflow if they rely on web access for email management.
- roles: End Users, IT Administrators
- references: https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access, https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
Conditional Access Policy Implementation
If not properly communicated, users may be confused about the sudden unavailability of Outlook for the web, leading to frustration and decreased productivity.
- roles: End Users, IT Support
- references: https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies, https://learn.microsoft.com/microsoft-365-apps/outlook/manage/enable-new-outlook-if-outlook-web-is-blocked?view=o365-worldwide
User Experience with Outlook for Windows
Users may experience a learning curve or resistance to using the new Outlook for Windows if they are accustomed to the web version, potentially impacting their efficiency.
- roles: End Users, Training Coordinators
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook, https://learn.microsoft.com/microsoft-365-apps/outlook/manage/enable-new-outlook-if-outlook-web-is-blocked?view=o365-worldwide
Support and Documentation Clarity
Lack of preparation and communication regarding the changes may lead to increased support requests and confusion among users about accessing their emails.
- roles: IT Support, End Users
- references: https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access, https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
Policy Management and Compliance
Changes in access policies without prior notice may lead to compliance issues if users are not informed about the new access restrictions.
- roles: Compliance Officers, IT Administrators
- references: https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access, https://learn.microsoft.com/microsoft-365-apps/outlook/manage/enable-new-outlook-if-outlook-web-is-blocked?view=o365-worldwide
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Improved User Experience with Conditional Access Policies
By utilizing Conditional Access policies to block Outlook for the web while keeping Outlook for Windows accessible, organizations can streamline user experience and ensure that users have uninterrupted access to their email via the desktop application. This can reduce confusion and enhance productivity as users adapt to changes in the application environment.
- next-steps: Review the updated Microsoft support articles on Conditional Access policies, and implement the necessary configurations to block Outlook for the web as per the new guidance. Conduct user training sessions to inform staff about the changes and how to access their emails effectively.
- roles: IT Administrators, End Users, Support Teams
- references: https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access, https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
Centralized Management of Outlook Access
The new method allows for a more centralized approach to managing access to Outlook services. By controlling access through Conditional Access policies, IT can more effectively manage user permissions and reduce the risk of unauthorized access, enhancing overall security.
- next-steps: Set up a review process for existing Conditional Access policies and evaluate if additional policies are needed to further enhance security. Train IT staff on the new management capabilities and best practices for maintaining user access.
- roles: IT Security Officers, Compliance Managers, IT Administrators
- references: https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies, https://learn.microsoft.com/microsoft-365-apps/outlook/manage/enable-new-outlook-if-outlook-web-is-blocked?view=o365-worldwide
Cost-Effective Management of Licensing
By disabling Outlook for the web, organizations may have the opportunity to reassess their licensing needs. This could lead to potential cost savings by eliminating unnecessary licenses for users who primarily use Outlook for Windows, optimizing overall software expenditure.
- next-steps: Conduct an audit of current Outlook licenses and user access patterns to identify users who may not need access to Outlook for the web. Based on the findings, consider adjusting licensing agreements to align with actual usage.
- roles: Finance Managers, IT Administrators, Procurement Officers
- references: https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access, https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-07-29 | MC Messages | Updated May 8, 2025: We have updated the timeline below. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late June 2025 (previously late April) and expect to complete by mid-July 2025 (previously mid-May). | Updated July 28, 2025: We have updated the content, timeline, and additional resources.
We are changing the recommended method for disabling Outlook for the web so that users can continue to access the new Outlook for Windows. [When this will happen:] There is no change that is rolling out. We have published a new support article with instructions on how to use our existing infrastructure to block users from access Outlook for the web without impacting Outlook for Windows. |
| 2025-07-29 | MC How Affect | We're changing the CASMailbox -OWAEnabled parameter that enables or disables access to user mailboxes using Outlook for the web (formerly known as Outlook Web App or OWA) to block only Outlook for the web and to not affect the behavior of new Outlook for Windows.
You can manage new Outlook for Windows with the CASMailbox-OneWinNativeOutlookEnabled policy. You are receiving this message because our reporting indicates one or more users in your organization may be using the New Outlook for Windows. Note: We will not change any existing value for the settings, but we will change which setting controls if the new Outlook for Windows is allowed for the user. Before this rollout, both CASMailbox-OWAEnabled and CASMailboxOneWinNativeOutlookEnabled policies are checked. After this rollout, we will remove the check for CASMailbox-OWAEnabled so you can have the chance to enable new Outlook and still disable Outlook for the web if desired. | Admins can follow the instructions in this support article to block access to Outlook for the web using Conditional Access. Blocking Outlook for the web using this policy has no impact on Outlook for Windows.
Once Outlook for the web is blocked, admins can set the CASMailbox policy -OWAEnabled to $true. This will have no impact on users' ability to access outlook for the web since the work was already done to block Outlook for the web with another policy. |
| 2025-07-29 | MC Last Updated | 05/08/2025 22:47:51 | 2025-07-28T23:46:22Z |
| 2025-07-29 | MC prepare | This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.
After this change takes effect, please confirm the CASMailbox OneWinNativeOutlookEnabled policy state for each mailbox. The default value is Enabled. Learn more Enable or disable Outlook on the web access to mailboxes in Exchange Server | Microsoft Learn (will be updated before rollout) Enable or disable access to the new Outlook for Windows | Microsoft Learn (will be updated before rollout) #newoutlookforwindows https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook | There are no changes to existing polices, so there is nothing you need to do to prepare.
Learn more Enable or disable Outlook on the web access to mailboxes in Exchange Server | Microsoft Learn (will be updated before rollout) Enable or disable access to the new Outlook for Windows | Microsoft Learn (will be updated before rollout) #newoutlookforwindows https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook https://learn.microsoft.com/microsoft-365-apps/outlook/manage/enable-new-outlook-if-outlook-web-is-blocked?view=o365-worldwidehttps%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fmicrosoft-365-apps%2Foutlook%2Fmanage%2Fenable-new-outlook-if-outlook-web-is-blocked%3Fview%3Do365-worldwide |
| 2025-07-29 | MC Summary | Microsoft is changing how to enable or disable the new Outlook for Windows and Outlook for the web. The rollout will begin in late June 2025 and complete by mid-July 2025. The CASMailbox-`OWAEnabled` parameter will only affect Outlook for the web, while the new Outlook for Windows will be managed with the CASMailbox-`OneWinNativeOutlookEnabled` policy. No admin action is required before the rollout. | Microsoft updated guidance on disabling Outlook for the web without affecting Outlook for Windows. Admins can use Conditional Access policies to block Outlook for the web while keeping Outlook for Windows enabled. No policy changes or preparation are needed; updated support articles provide detailed instructions. |
| 2025-05-09 | MC Last Updated | 03/27/2025 18:18:44 | 2025-05-08T22:47:51Z |
| 2025-05-09 | MC Messages | Updated March 27, 2025: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late April 2025 (previously late February) and expect to complete by mid-May 2025 (previously mid-March). | Updated May 8, 2025: We have updated the timeline below. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late June 2025 (previously late April) and expect to complete by mid-July 2025 (previously mid-May). |
| 2025-05-09 | MC End Time | 06/30/2025 09:00:00 | 2025-08-25T09:00:00Z |
| 2025-05-09 | MC Summary | Microsoft is changing how to enable or disable the new Outlook for Windows and Outlook for the web. The rollout will start in late April 2025 and finish by mid-May 2025. The CASMailbox-`OWAEnabled` parameter will only block Outlook for the web, while the CASMailbox-`OneWinNativeOutlookEnabled` policy will manage the new Outlook for Windows. No admin action is required before the rollout. | Microsoft is changing how to enable or disable the new Outlook for Windows and Outlook for the web. The rollout will begin in late June 2025 and complete by mid-July 2025. The CASMailbox-`OWAEnabled` parameter will only affect Outlook for the web, while the new Outlook for Windows will be managed with the CASMailbox-`OneWinNativeOutlookEnabled` policy. No admin action is required before the rollout. |
| 2025-03-28 | MC Last Updated | 02/10/2025 22:15:48 | 2025-03-27T18:18:44Z |
| 2025-03-28 | MC Messages | Updated February 10, 2025: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late February 2025 (previously late January) and expect to complete by mid-March 2025 (previously mid-February). | Updated March 27, 2025: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late April 2025 (previously late February) and expect to complete by mid-May 2025 (previously mid-March). |
| 2025-03-28 | MC End Time | 04/28/2025 09:00:00 | 2025-06-30T09:00:00Z |
| 2025-03-28 | MC Summary | Microsoft is updating the process to enable/disable new Outlook for Windows and Outlook for the web, starting late January 2025. The rollout will change the CASMailbox parameters, separating the controls for web and Windows versions. Organizations should review configurations and update documentation accordingly. No admin action is required before the rollout. | Microsoft is changing how to enable or disable the new Outlook for Windows and Outlook for the web. The rollout will start in late April 2025 and finish by mid-May 2025. The CASMailbox-`OWAEnabled` parameter will only block Outlook for the web, while the CASMailbox-`OneWinNativeOutlookEnabled` policy will manage the new Outlook for Windows. No admin action is required before the rollout. |
| 2025-02-11 | MC Messages | Updated January 29, 2025: We have updated the rollout timeline below. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late February 2025 (previously late January) and expect to complete by mid-March 2025 (previously mid-February). | Updated February 10, 2025: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late February 2025 (previously late January) and expect to complete by mid-March 2025 (previously mid-February). |
| 2025-02-11 | MC How Affect | We're changing the CASMailbox -OWAEnabled parameter that enables or disables access to user mailboxes using Outlook for the web (formerly known as Outlook Web App or OWA) to block only Outlook for the web and to not affect the behavior of new Outlook for Windows.
You can manage new Outlook for Windows with the CASMailbox-OneWinNativeOutlookEnabled policy. You are receiving this message because our reporting indicates one or more users in your organization may be using the New Outlook for Windows. Note: We will not change any existing value for the settings, but we will change which setting is checked to see if new Outlook for Windows is allowed to run on that computer. Before this rollout, both CASMailbox-OWAEnabled and CASMailboxOneWinNativeOutlookEnabled policies are checked. After this rollout, we will remove the check for CASMailbox-OWAEnabled so you can have the chance to enable new Outlook and still disable Outlook for the web if desired. | We're changing the CASMailbox -OWAEnabled parameter that enables or disables access to user mailboxes using Outlook for the web (formerly known as Outlook Web App or OWA) to block only Outlook for the web and to not affect the behavior of new Outlook for Windows.
You can manage new Outlook for Windows with the CASMailbox-OneWinNativeOutlookEnabled policy. You are receiving this message because our reporting indicates one or more users in your organization may be using the New Outlook for Windows. Note: We will not change any existing value for the settings, but we will change which setting controls if the new Outlook for Windows is allowed for the user. Before this rollout, both CASMailbox-OWAEnabled and CASMailboxOneWinNativeOutlookEnabled policies are checked. After this rollout, we will remove the check for CASMailbox-OWAEnabled so you can have the chance to enable new Outlook and still disable Outlook for the web if desired. |
| 2025-02-11 | MC Last Updated | 01/29/2025 21:20:17 | 2025-02-10T22:15:48Z |
| 2025-01-30 | MC Last Updated | 11/06/2024 00:18:12 | 2025-01-29T21:20:17Z |
| 2025-01-30 | MC Messages | Updated November 5, 2024: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late January 2025 and expect to complete by mid-February 2025. | Updated January 29, 2025: We have updated the rollout timeline below. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late February 2025 (previously late January) and expect to complete by mid-March 2025 (previously mid-February). |
| 2025-01-30 | MC End Time | 04/18/2025 09:00:00 | 2025-04-28T09:00:00Z |
| 2024-11-06 | MC prepare | This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.
After this change takes effect, please confirm the OneWinNativeOutlookEnabled policy state for each mailbox. The default value is Enabled. Learn more Enable or disable Outlook on the web access to mailboxes in Exchange Server | Microsoft Learn (will be updated before rollout) Enable or disable access to the new Outlook for Windows | Microsoft Learn (will be updated before rollout) #newoutlookforwindows https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook | This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.
After this change takes effect, please confirm the CASMailbox OneWinNativeOutlookEnabled policy state for each mailbox. The default value is Enabled. Learn more Enable or disable Outlook on the web access to mailboxes in Exchange Server | Microsoft Learn (will be updated before rollout) Enable or disable access to the new Outlook for Windows | Microsoft Learn (will be updated before rollout) #newoutlookforwindows https://learn.microsoft.com/exchange/clients/outlook-on-the-web/mailbox-access https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/outlook-on-the-web/enable-disable-employee-access-new-outlook |
| 2024-11-06 | MC MessageTagNames | User impact, Admin impact | Updated message, User impact, Admin impact |
| 2024-11-06 | MC Summary | Microsoft is updating the process to enable/disable Outlook for Windows and Outlook for the web, with changes rolling out from late January to mid-February 2025. The OWAEnabled parameter will only affect Outlook for the web, while the OneWinNativeOutlookEnabled policy will manage new Outlook for Windows. No admin action is required before the rollout. | Microsoft is updating the process to enable/disable new Outlook for Windows and Outlook for the web, starting late January 2025. The rollout will change the CASMailbox parameters, separating the controls for web and Windows versions. Organizations should review configurations and update documentation accordingly. No admin action is required before the rollout. |
| 2024-11-06 | MC Last Updated | 11/01/2024 00:03:57 | 2024-11-06T00:18:12Z |
| 2024-11-06 | MC Messages | We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web.
[When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late January 2025 and expect to complete by mid-February 2025. | Updated November 5, 2024: We have updated the content. Thank you for your patience.
We are changing how you enable or disable the new Microsoft Outlook for Windows and Microsoft Outlook for the web. [When this will happen:] General Availability (Worldwide, GCC): We will begin rolling out late January 2025 and expect to complete by mid-February 2025. |
| 2024-11-06 | MC Title | Microsoft new Outlook for Windows and Outlook for the web: Changing how to disable/enable | (Updated) Microsoft new Outlook for Windows and Outlook for the web: Changing how to disable/enable |
| 2024-11-06 | MC How Affect | We're changing the OWAEnabled parameter that enables or disables access to user mailboxes using Outlook for the web (formerly known as Outlook Web App or OWA) to block only Outlook for the web and to not affect the behavior of new Outlook for Windows.
You can manage new Outlook for Windows with the OneWinNativeOutlookEnabled policy. You are receiving this message because our reporting indicates one or more users in your organization may be using the New Outlook for Windows. Note: We will not change any existing value for the settings, but we will change which setting is checked to see if new Outlook for Windows is allowed to run on that computer. Before this rollout, both OWAEnabled and OneWinNativeOutlookEnabled policies are checked. After this rollout, we will remove the check for OWAEnabled so you can have the chance to enable new Outlook and still disable Outlook for the web if desired. | We're changing the CASMailbox -OWAEnabled parameter that enables or disables access to user mailboxes using Outlook for the web (formerly known as Outlook Web App or OWA) to block only Outlook for the web and to not affect the behavior of new Outlook for Windows.
You can manage new Outlook for Windows with the CASMailbox-OneWinNativeOutlookEnabled policy. You are receiving this message because our reporting indicates one or more users in your organization may be using the New Outlook for Windows. Note: We will not change any existing value for the settings, but we will change which setting is checked to see if new Outlook for Windows is allowed to run on that computer. Before this rollout, both CASMailbox-OWAEnabled and CASMailboxOneWinNativeOutlookEnabled policies are checked. After this rollout, we will remove the check for CASMailbox-OWAEnabled so you can have the chance to enable new Outlook and still disable Outlook for the web if desired. |
Last updated 2 months ago ago
