Office 2016/2019 Blocking Intelligent Services

michaelmcgaw
New Contributor III

Does anyone have any idea how to disable the "Office Intelligence Services" checkbox in the Office apps "Privacy" preference?

I was able to do so for the Diagnostic Data checkbox.

Thanks, -- M

1 ACCEPTED SOLUTION

crbeck
Contributor

There's a preference for that you can set with a profile.

PII_And_Intelligent_Services_Preference
kFREIntelligenceServicesConsentV2Key

Set both keys to false under each preference domain (com.microsoft.Powerpoint, com.microsoft.Outlook, etc.)

https://macadmins.software/ is a good resource, run by the Office for Mac development team at Microsoft. If you go to that site and click the Preferences button it'll send you to a Google Sheet with all of the different preferences you can set.

View solution in original post

5 REPLIES 5

crbeck
Contributor

There's a preference for that you can set with a profile.

PII_And_Intelligent_Services_Preference
kFREIntelligenceServicesConsentV2Key

Set both keys to false under each preference domain (com.microsoft.Powerpoint, com.microsoft.Outlook, etc.)

https://macadmins.software/ is a good resource, run by the Office for Mac development team at Microsoft. If you go to that site and click the Preferences button it'll send you to a Google Sheet with all of the different preferences you can set.

michaelmcgaw
New Contributor III

Thank you, @crbeck!

anickless
Contributor II

I think you have to set the kFREIntelligenceSdrvicesConsentV2Key to true

donmontalvo
Esteemed Contributor III

This was posted above, found many more options for 2019:

https://macadmins.software/docs/ > Preferences

This might help on the plist management side. Gives you a visual way to lay out your settings, creates plist files, converts plist files to xml1 for upload, and finally opens plist parent folder.

#!/bin/sh
# Helps make managing plist files for Jamf Pro configuration profiles
# used to manage Microsoft Office 2019 settings. DM

# Determine pwd of script
CURRENTDIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
cd "$CURRENTDIR"

# Make target dir
TARGETDIR="$CURRENTDIR/UPLOAD_TO_JAMFPRO"
/bin/mkdir -p "$TARGETDIR"

# Domains
OFFICE="com.microsoft.office"
OUTLOOK="com.microsoft.Outlook"
EXCEL="com.microsoft.Excel"
ONENOTE="com.microsoft.onenote.mac"
POWERPOINT="com.microsoft.Powerpoint"
WORD="com.microsoft.Word"
AUTOUPDATE="com.microsoft.autoupdate.fba"
AUTOUPDATE2="com.microsoft.autoupdate2"
ERRORREPORTING="com.microsoft.errorreporting"
OFFICE365SERCICEV2="com.microsoft.Office365ServiceV2"

# Office
/usr/bin/defaults write "$TARGETDIR"/"$OFFICE" DefaultsToLocalOpenSave -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$OFFICE" TermsAccepted1809 -bool TRUE

# Outlook
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" FirstRunExperienceCompletedO15 -bool TRUE

# Excel
/usr/bin/defaults write "$TARGETDIR"/"$EXCEL" kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$EXCEL" kFREEnterpriseTelemetryInfoKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$EXCEL" kFRETelemetryConsentKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$EXCEL" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$EXCEL" SendCrashReportsEvenWithTelemetryDisabled -bool FALSE

# OneNote
/usr/bin/defaults write "$TARGETDIR"/"$ONENOTE" kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$ONENOTE" kFREEnterpriseTelemetryInfoKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$ONENOTE" kFRETelemetryConsentKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$ONENOTE" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$ONENOTE" SendCrashReportsEvenWithTelemetryDisabled -bool FALSE

# Outlook
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" kFREEnterpriseTelemetryInfoKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" kFRETelemetryConsentKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$OUTLOOK" SendCrashReportsEvenWithTelemetryDisabled -bool FALSE

# Powerpoint
/usr/bin/defaults write "$TARGETDIR"/"$POWERPOINT" kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$POWERPOINT" kFREEnterpriseTelemetryInfoKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$POWERPOINT" kFRETelemetryConsentKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$POWERPOINT" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$POWERPOINT" SendCrashReportsEvenWithTelemetryDisabled -bool FALSE

# Word
/usr/bin/defaults write "$TARGETDIR"/"$WORD" kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$WORD" kFREEnterpriseTelemetryInfoKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$WORD" kFRETelemetryConsentKey -bool TRUE
/usr/bin/defaults write "$TARGETDIR"/"$WORD" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$WORD" SendCrashReportsEvenWithTelemetryDisabled -bool FALSE

# AutoUpdate
/usr/bin/defaults write "$TARGETDIR"/"$AUTOUPDATE" SendAllTelemetryEnabled -bool FALSE
/usr/bin/defaults write "$TARGETDIR"/"$AUTOUPDATE2" SendAllTelemetryEnabled -bool FALSE

# ErrorReporting
/usr/bin/defaults write "$TARGETDIR"/"$ERRORREPORTING" SendCrashReportsEvenWithTelemetryDisabled -bool TRUE

# OFFICE365SERCICEV2
/usr/bin/defaults write "$TARGETDIR"/"$OFFICE365SERCICEV2" SendAllTelemetryEnabled -bool FALSE

/usr/bin/plutil -convert xml1 "$TARGETDIR"/*.plist

# Open Finder window
currentUser=$( stat -f%Su /dev/console )
sudo -u "$currentUser" osascript << EOF
    set targetFolder to POSIX file "$TARGETDIR"
    tell application "Finder"
        open targetFolder
        activate
    end tell
EOF

exit 0
--
https://donmontalvo.com

davidi4
Contributor

If anyone else was confused like I was, Intelligent Services went away in 16.28 and its replacement is managed either via Office cloud policy service or in the com.microsoft.office domain. Much easier, as I can let our O365 Admins deal with it and get a consistent experience across all of a user's devices.

https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences