Let Windows apps access email

Policy ID
LetAppsAccessEmail
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › App Privacy

Description

This policy setting specifies whether Windows apps can access email.

You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.

If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access email by using Settings > Privacy on the device.

If you choose the "Force Allow" option, Windows apps are allowed to access email and employees in your organization cannot change it.

If you choose the "Force Deny" option, Windows apps are not allowed to access email and employees in your organization cannot change it.

If you disable or do not configure this policy setting, employees in your organization can decide whether Windows apps can access email by using Settings > Privacy on the device.

If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.

Options

  • Default for all apps:
    • User is in control
    • Force Allow
    • Force Deny
  • Put user in control of these specific apps (use Package Family Names):
  • Force allow these specific apps (use Package Family Names):
  • Force deny these specific apps (use Package Family Names):

Registry

ComputerHKEY_LOCAL_MACHINE
  • LetAppsAccessEmailREG_DWORD
  • LetAppsAccessEmail_UserInControlOfTheseAppsREG_MULTI_SZ
  • LetAppsAccessEmail_ForceAllowTheseAppsREG_MULTI_SZ
  • LetAppsAccessEmail_ForceDenyTheseAppsREG_MULTI_SZ

Other policies in the same category

View all policies in this category (29)