Protected Trust Add-in - Prevent Disabling Issues

Help Prevent the Protected Trust Add-in from Disabling Using Registry Edits

To work around the resiliency logic, one can use a simple .reg file and add the add-in to the trusted addins list or a Group Policy Object to deploy the same values that would be generated locally to all the users in the domain:

  1. Add a dword entry called ProtectedTrust.OutlookAddin.Connect with a value data of 1 under HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Office\1x.0\Outlook\Resiliency\AddinList
  2. Set the LoadBehavior (US English spelling!) dword value to 3 under HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Addins\ProtectedTrust.OutlookAddin.Connect
  3. Delete the HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\DisabledItems key
  4. Re-create the HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\DisabledItems key
  5. Delete the HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\CrashingAddinList key
  6. Re-create the HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\CrashingAddinList key
  7. Add a dword entry called ProtectedTrust.OutlookAddin.Connect with a value of 1 under HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\DoNotDisableAddinList
  8. Add a dword entry called ProtectedTrust.OutlookAddin.Connect\dtype with a value of 0 under HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\NotificationReminderAddinData
  9. Add a dword entry called ProtectedTrust.OutlookAddin.Connect with a value of 967a844d hexadecimal under HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\1x.0\Outlook\Resiliency\NotificationReminderAddinData

Where:

  • ADDIN_NAME is the name of the add-in as found under     ( and should be: ProtectedTrust.OutlookAddin.Connect ) HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Addins\
  • 1x.0 is the office version, for example 15.0 for Office 2013 and 16.0 for Office 2016

NOTE: The value at point 1 will always enable the add-in but it will also prevent the user from controlling the add-in load behaviour. To allow users to control the add-in (enable or disable it from the Outlook user interface), set a value data of 2 (or dword:00000002 for the reg file) instead.  

NOTE: The value at point 9 always enables your add-in until Saturday, January 1st 2050 at 1:01:01 AM.

Here is a REG file example: 

Windows Registry Editor Version 5.00<br><br>[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Outlook\Resiliency\AddinList]<br> "ProtectedTrust.OutlookAddin.Connect"=dword:00000001<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Addins\ProtectedTrust.OutlookAddin.Connect]<br> "LoadBehavior"=dword:00000003<br>[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\DisabledItems]<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\DisabledItems]<br>[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\CrashingAddinList]<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\CrashingAddinList]<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\DoNotDisableAddinList]<br> "ProtectedTrust.OutlookAddin.Connect"=dword:00000001<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\NotificationReminderAddinData] <br>"ProtectedTrust.OutlookAddin.Connect\dtype"=dword:00000000<br>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\NotificationReminderAddinData] <br>"ProtectedTrust.OutlookAddin.Connect"=dword:967a844d