Restrict "Internet Accounts"

[merber]

Hi,

Is there a way to block a (standard) user from adding Exchange accounts to "Internet Accounts" on MacOS (10.13)?

Thanks
Marcus.

[mm2270]

You can block the Internet Accounts preference pane with a Config Profile ("Restrictions" payload) Is that what you're after?
Or are you asking if there's a way to block only specific items within the Internet Accounts Preference Pane? If so, then no, unfortunately, Apple's MDM payloads (and even the older MCX stuff) doesn't have a way to granularly control individual items within that pane. It's pretty much all or nothing.

[merber]

Hi,
Well, as I found out, just blocking the preferences pane does not really do the job as you can easily add accounts directly through different apps - like the Mail App for example. My goal would be to prevent users from adding Exchange accounts to the Mail app - is there any other way to accomplish that?

Thanks,
Marcus.

[coeadmin]

Were you ever able to figure anything out with this? We just decided we'd like to restrict this as well - adding a mail account in Apple Mail for example would add to Internet Accounts, which we have restricted in our system preferences, which forces us to have to log in, disable restrictions, check the accounts, remove, reboot, etc, we'd just like to avoid having to do that every time a machine is returned to us. Thanks!

[marlink]

We'd love to find a way to block adding Exchange accounts to Apple Mail at our University, too. We don't want to simply block Apple Mail (since a lot of our users would still want to use it for their personal mail accounts), but we'd love to be able to force our users to use Outlook for their University email.