Outlook Advanced Diagnostic scenario in SaRA results indicate an offline scan was forced by group policy for Outlook object model access

Applies to: Outlook 2019Outlook 2013Microsoft Outlook 2010

Symptoms


When you run the Outlook Advanced Diagnostics scenario in the Support and Recovery Assistant (SaRA), the results indicate an Offline scan was performed.

Results screen from SaRa.

Cause



This alert occurs when you have the following data configured in the Windows Registry. This configuration causes Outlook to automatically deny requests from any programs that attempt to access Outlook data.

Outlook 2010 and later versions:

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\x.0\Outlook\Security
DWORD: AdminSecurityMode
Value: 3
And one or both of the following registry keys:

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\x.0\Outlook\Security
DWORD: PromptOOMAddressInformationAccess
Value: 0

OR

Key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\x.0\Outlook\Security
DWORD: PromptOOMAddressBookAccess
Value: 0

Resolution


If you need to perform a full scan of Outlook, you can temporarily modify the PromptOOMAddressInformationAccess and/or PromptOOMAddressBookAccess registry values to 1. This will cause Outlook to no longer automatically deny requests (from any program) to access Outlook data and will instead prompt you to approve the access request. The value of 1 is the default setting for this feature.

The available value data for these registry values is listed below.
 
0: Automatically deny
1: Prompt user
2: Automatically approve

The above registry data in the Policies hive may be controlled by a Group Policy. The Policy may need to be modified to permanently modify these settings.