ABCDEFGHIJKLMNOPQRSTUVWXYZAAABACAD
1
ApplicationDomainKeyTypeProfile ManageableSupported Software VersionDefault ValueCommentsExample CommandLink 1Link 2
2
Othercom.microsoft.autoupdate.fbaSendAllTelemetryEnabledBooleanYes15.x - 16.27TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. This key was removed in 16.27 / MAU 4.12 and there is nothing left to manage in this preference domain.defaults write com.microsoft.autoupdate.fba SendAllTelemetryEnabled -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1565795925296800
3
MAUcom.microsoft.autoupdate2AcknowledgedDataCollectionPolicyStringYesMAU 4.12
(16.27.0)		RequiredDataOnlyThe first time 4.12 or later of MAU is launched, users will see a Required Data Notice dialog. If you don't want your users to see this dialog, you can set the preference to RequiredDataOnly. Regardless of which value you set, the dialog won't be shown to your users. If you let your users see this dialog, then when the user chooses OK, the value RequiredDataOnly is written and the dialog is not shown to the user again. The RequiredAndOptionalData value stopped working in MAU 4.70.defaults write com.microsoft.autoupdate2 AcknowledgedDataCollectionPolicy RequiredDataOnly
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#acknowledgeddatacollectionpolicy
4
MAUcom.microsoft.autoupdate2ApplicationsDictionaryYesRegister applications that MAU should update. If this is not managed MAU might have issues finding updates for applications that a user has never opened.https://github.com/pbowden-msft/Payloads
5
MAUcom.microsoft.autoupdate2ChannelNameStringYesMAU 3.3 (15.17.0)Production (Inferred)Set the update channel. Valid arguments: Current, CurrentThrottle, Beta, Preview, Custom. defaults write com.microsoft.autoupdate2 ChannelName -string 'Custom'https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#channelname
6
MAUcom.microsoft.autoupdate2DisableEndOfSupportNotificationsBooleanYesFALSESet to TRUE to prevent Office 2016 end of support notificationdefaults write com.microsoft.autoupdate2 DisableEndOfSupportNotifications -boolean TRUEhttps://macadmins.slack.com/archives/C29PWTQFM/p1589833927118300
7
MAUcom.microsoft.autoupdate2DisableInsiderCheckboxBooleanYesMAU 3.4 (15.18.0)FALSESet to true to make the "Join the Office Insider Program..." checkbox unavailable/greyed out to usersdefaults write com.microsoft.autoupdate2 DisableInsiderCheckbox -bool TRUE
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#disableinsidercheckbox
8
MAUcom.microsoft.autoupdate2EnableCheckForUpdatesButtonBooleanYesMAU 3.18TRUEEnables/disables the Check For Updates button in the MAU GUI.defaults write com.microsoft.autoupdate2 EnableCheckForUpdatesButton -bool FALSEhttps://macadmins.slack.com/archives/C8J5E5VPW/p1525938524000340
9
MAUcom.microsoft.autoupdate2ExtendedLoggingBooleanYesMAU 3.8 (15.27.0)Enable extended logging for the MAU client. Writes to /Library/Logs/Microsoft/autoupdate.logdefaults write com.microsoft.autoupdate2 ExtendedLogging -bool TRUE
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#extendedlogging
10
MAUcom.microsoft.autoupdate2HowToCheckStringYesMAU 3.8AutomaticCheckChange how MAU interacts with updates. Note that AutomaticDownload will do a download and install silently if possible. Valid values are: AutomaticCheck, AutomaticDownload. The Manual value was deprecated in MAU 4.70.defaults write com.microsoft.autoupdate2 HowToCheck -string 'AutomaticDownload'https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#howtocheck
https://macadmins.slack.com/archives/C07UZ1X7B/p1477504848005916
11
MAUcom.microsoft.autoupdate2ManifestServerStringYesMAU 3.8 (15.27.0)Set a custom manifest server. Useful for "locking" clients to a specific version of Office.defaults write com.microsoft.autoupdate2 ManifestServer -string 'https://server/folder/'https://macadmins.software/docs/MAU_CachingServer.pdf
12
MAUcom.microsoft.autoupdate2SendAllTelemetryEnabledBooleanYesMAU 3.x - MAU 4.11TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Replaced by AcknowledgedDataCollectionPolicy in MAU 4.12.defaults write com.microsoft.autoupdate2 SendAllTelemetryEnabled -bool TRUE
13
MAUcom.microsoft.autoupdate2StartDaemonOnAppLaunchBooleanYesTRUEControls whether the ‘Microsoft AU Daemon’ should be launched when an Office application is launched. If this value is set to 0, updates will not be detected, regardless of the ‘HowToCheck’ preference, and users will need to use the Help -> Check for Updates menu option to see if updates are available.defaults write com.microsoft.autoupdate2 St
artDaemonOnAppLaunch -bool FALSE		https://macadmins.software/docs/MAU_38.pdf
14
MAUcom.microsoft.autoupdate2UpdateCacheStringYesMAU 3.8 (15.27.0)Set a custom cache for clients to use when checking for updates. IE - packages, dmgs.defaults write com.microsoft.autoupdate2 UpdateCache -string 'https://server/folder/'https://macadmins.software/docs/MAU_CachingServer.pdf
15
MAUcom.microsoft.autoupdate2UpdateCheckFrequencyIntegerYes3.9.1720Deprecated in MAU 4.70 and replaced by UpdateCheckIntervaldefaults write com.microsoft.autoupdate2 UpdateCheckFrequency -int 120
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#updatecheckfrequency
16
MAUcom.microsoft.autoupdate2UpdateCheckIntervalIntegerYesMAU 4.70780Specifies the number of minutes between checking for updates. Default is set to check every 13 hours.defaults write com.microsoft.autoupdate2 UpdateCheckInterval -int 120
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#updatecheckinterval
17
MAUcom.microsoft.autoupdate2
UpdateDeadline.ApplicationsForcedUpdateSchedule
DictionaryYes4.13+Using this preference, MacAdmins can set specific deadlines perapp per version, by defining a dictionary, for example:
<key>UpdateDeadline.ApplicationsForcedUpdateSchedule</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>ForcedUpdateDate</key>
<date>2019-07-20T20:01:20Z</date>
<key>ForcedUpdateVersion</key>
<string>16.26.19060901</string>
</dict>
</dict>		https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
18
MAUcom.microsoft.autoupdate2UpdateDeadline.DaysBeforeForcedQuitIntegerYes4.13+This preference is mandatory to set in order to use the MAU Update Deadline feature and does not have any default values. The above setting will enable MAU to enforce an update within 5 days of its detection. The same pref can also be used to setup deadline for specific apps, for example:
<key>Applications</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>LCID</key>
<integer>1033</integer>
<key>UpdateDeadline.DaysBeforeForcedQuit</key>
<integer>5</integer>
</dict>
</dict>		https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
19
MAUcom.microsoft.autoupdate2UpdateDeadline.FinalCountDownIntegerYes4.48+60IT admins can now override the default deadline time of 60 minutes
https://docs.microsoft.com/en-us/officeupdates/release-history-microsoft-autoupdate#june-2022-release
20
MAUcom.microsoft.autoupdate2UpdateDeadline.StartAutomaticUpdatesIntegerYes4.13+3This is an optional preference, which will turn on the Automatic Download and Install mode on MAU irrespective of the current MAU settings on the device. By default it is set to 3 days or 72 hours before the actual update deadline. Once the deadline is past, the preference will revert to the value set prior to turning on Automatic Download and Install mode. for example:
<key>UpdateDeadline.StartAutomaticUpdates</key>
<integer>3</integer>		https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
https://www.kevinmcox.com/2019/07/forcing-microsoft-office-update-deadlines-with-mau/
21
MAUcom.microsoft.autoupdate2UpdaterOptimizationStringYes4.40+SizeIf you have a security agent like CrowdStrike installed and updates cause beachballs; Set UpdaterOptimization preference to "CPU" to prefer file-based delta updates (instead of binary deltas). The trade-off will be larger monthly updates.defaults write com.microsoft.autoupdate2 UpdaterOptimization -string 'CPU'
https://learn.microsoft.com/en-us/deployoffice/mac/mau-preferences#updateroptimization
https://stream.lib.utah.edu/index.php?c=details&id=13476
22
MERcom.microsoft.errorreportingIsAttachedEnabledBooleanYesTRUEDisable attaching the file that caused the crash in the crash report. If you are working in a sensitive business it is recommended to set this to false.defaults write com.microsoft.errorreporting IsAttachedEnabled -bool FALSE
23
MERcom.microsoft.errorreportingIsStoreLastCrashEnabledBooleanYes15.28.0FALSEWill store the last crash report in the following path which can be helpful for debugging. ~/Library/Group Containers/UBF8T346G9.ms/MerpTempItemsdefaults write com.microsoft.errorreporting IsStoreLastCrashEnabled -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1479236973009705
24
MERcom.microsoft.errorreporting
SendCrashReportsEvenWithTelemetryDisabled
BooleanYesFALSEDisable upload of telemetry data in Crash Reportsdefaults write com.microsoft.errorreporting SendCrashReportsEvenWithTelemetryDisabled -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1524246348000451
25
Excelcom.microsoft.ExcelkFREEnterpriseTelemetryInfoKeyBooleanYes16.27 ONLYFALSESuppresses a temporary Privacy and Services Update dialog in 16.27 ONLY. (Was previously used for a similar purpose in 16.13.1 but the key was recycled.)defaults write com.microsoft.Excel kFREEnterpriseTelemetryInfoKey -bool TRUEhttps://macadmins.software/docs/16.28-Privacy-Consent.key
26
Excelcom.microsoft.ExcelkFREIntelligenceServicesConsentV2KeyBooleanYes16.17 - 16.27Users who are activated with O365 will see a new "Use Intelligent Services?" pop-up dialog in Word, Excel & PowerPoint after updating to 16.17. The net effect of doing this will enable Researcher (Word), Translate (Word, Excel, PowerPoint), Smart Lookup (Word, PowerPoint), and QuickStarter (PowerPoint). Set to TRUE to auto-accept. Requires "PII_And_Intelligent_Services_Preference" as well.defaults write com.microsoft.Excel kFREIntelligenceServicesConsentV2Key -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1536696868000100
27
Excelcom.microsoft.ExcelkFRETelemetryConsentKeyBooleanYes16.13.1FALSEMSA-based Key to suppress a screen on update from pre-16.13 called "Connected Services" with an Accept button on it. If you wish to suppress this new dialog for MSA-based accounts set this key to TRUE.defaults write com.microsoft.Excel kFRETelemetryConsentKey -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1527191452000462
28
Excelcom.microsoft.ExcelkSubUIAppCompletedFirstRunSetup1507BooleanYes15.x - 16.16.xFALSEControls the original "What's New" dialog and Office 365 activation prompt on first launch. Replaced by OfficeAutoSignIn starting in version 16.17.defaults write com.microsoft.Excel kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
https://derflounder.wordpress.com/2016/01/17/suppressing-office-2016s-first-run-dialog-windows/
29
Excelcom.microsoft.ExcelNSRequiresAquaSystemAppearanceBooleanYes16.20FALSEDisable macOS Dark Mode settings for application.defaults write com.microsoft.Excel NSRequiresAquaSystemAppearance -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1544660345485200
30
Excelcom.microsoft.ExcelOUIWhatsNewShownItemIdsArrayYes15.32Controls the dynamic "What's New" dialog on first lauch after upgrades. An array of sequential ints. Can still be managed, but the new suite-wide 'ShowWhatsNewOnLaunch' key in 15.34 is the preferred method to disable all dialogs.defaults write com.microsoft.Excel OUIWhatsNewShownItemIds -array-add -int 1 -int 2
31
Excelcom.microsoft.ExcelPII_And_Intelligent_Services_PreferenceBooleanYes16.17 - 16.27Users who are activated with O365 will see a new "Use Intelligent Services?" pop-up dialog in Word, Excel & PowerPoint after updating to 16.17. The net effect of doing this will enable Researcher (Word), Translate (Word, Excel, PowerPoint), Smart Lookup (Word, PowerPoint), and QuickStarter (PowerPoint). Set to TRUE to auto-accept. Requires "kFREIntelligenceServicesConsentV2Key" as well.defaults write com.microsoft.Excel PII_And_Intelligent_Services_Preference -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1536170480000100?thread_ts=1536170480.000100
32
Excelcom.microsoft.ExcelSendAllTelemetryEnabledBooleanYes15.x - 16.27TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Replaced by a setting in com.microsoft.office for version 16.28+.defaults write com.microsoft.Excel SendAllTelemetryEnabled -bool TRUE
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-in-gcc-high-dod#turn-off-sending-telemetry-data-to-microsoft-from-office-for-mac
https://docs.microsoft.com/en-us/office365/enterprise/network-requests-in-office-2016-for-mac#telemetry
33
Excelcom.microsoft.ExcelSendASmileEnabledBooleanYesTRUEThis key when set to false will deactivate the ability for users to use the "Smile" feature.defaults write com.microsoft.Excel SendASmileEnabled -bool FALSE
34
Excelcom.microsoft.Excel
SendCrashReportsEvenWithTelemetryDisabled
BooleanYesThis will stop your client devices sending us usage telemetry and asking questions to your users, but if the app crashes, we'll still invoke our Error Reporting dialog and get the call-stack back here so we can see if you're running into problems. The issue here is that if you don't enable crash reporting, we are completely blind as to whether folks out there are having problems or not. Relevant for those who disable telemetry through the SendAllTelemetryEnabled key.defaults write com.microsoft.Excel SendCrashReportsEvenWithTelemetryDisabled -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1536706447000100
35
Excelcom.microsoft.ExcelSignInOptionsIntegerYes15.27.0-15.41.0
16.13.0*		nullThis will prevent user from signing in to any O365 service. This has the added effect of making sure users store no data online via microsoft servers.

* As of 16.13.0 these options work again.
0 - all accounts allowed
1 - prevent institutional accounts - only MSA (personal) accounts
2 - prevent MSA (personal) accounts - only institution accounts
4 - no accounts allowed to sign in		defaults write com.microsoft.Excel SignInOptions -int 4
36
Excelcom.microsoft.ExcelTryDefaultPasswordBooleanYes16.20TRUEBy default, when Excel opens an encrypted file, Excel tries to use a default password to decrypt the file. This preference prevents Excel, version 16.20 or higher, from trying a default decryption password.defaults write com.microsoft.Excel TryDefaultPassword -bool FALSE
https://docs.microsoft.com/en-us/deployoffice/mac/set-preference-default-password-excel
37
Allcom.microsoft.officeAllowVisualBasicToBindToSystemBooleanYes15.31FALSEThe AllowVisualBasicToBindToSystem setting determines if macros are allowed to use a DECLARE to bind to the system()
OS API. This API allows macros to execute arbitrary external processes and pass them arbitrary data on the command line.
The default value for this setting disallows the binding, as the system() API should not be used. When this setting is set to NO, macros that attempt to use system() will fail with an error at the point where system() is invoked.		defaults write com.microsoft.office AllowVisualBasicToBindToSystem -bool FALSEhttps://macadmins.software/docs/VBSecurityControls.pdf
38
Allcom.microsoft.officeConnectedOfficeExperiencesPreferenceBooleanYes16.28TRUEYou can use this preference to control whether most connected experiences are available to your users.defaults write com.microsoft.office ConnectedOfficeExperiencesPreference -bool FALSE
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-most-connected-experiences
39
Allcom.microsoft.officeDefaultsToLocalOpenSaveBooleanYes15.33.0FALSEWhen set to true will force the open/save panel to ‘On my Mac’ instead of 'Online Locations'defaults write com.microsoft.office DefaultsToLocalOpenSave -bool TRUE
https://derflounder.wordpress.com/2017/04/17/office-2016-defaultstolocalopensave-setting-change-as-of-office-2016-15-33-x/
40
Allcom.microsoft.officeDiagnosticDataTypePreferenceStringYes16.28FullDiagnosticDataIf you don't set this preference, both optional and required diagnostic data (Full) is sent to Microsoft. Valid options are:
BasicDiagnosticData (this sets the level to Required)
FullDiagnosticData (this sets the level to Optional)
ZeroDiagnosticData (this sets the level to Neither)
Descriptions of these levels are available in the linked documentation.		defaults write com.microsoft.office DiagnosticDataTypePreference -string BasicDiagnosticDatahttps://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences
41
Allcom.microsoft.officeDisableVisualBasicExternalDylibsBooleanYes15.31FALSEThe DisableVisualBasicExternalDylibs setting determines if macros are allowed to use a
DECLARE statement to bind a Visual Basic symbol name to an external procedure in the local OS. The
default value for this setting is to allow binding to external dylibs because many legitimate 3rd party
addin vendors use this feature of Visual Basic to add and extend features in Office for Mac. When this setting is set to NO, macros that attempt to use a DECLARE statement will fail with an error at the point where the external procedure is invoked.		defaults write com.microsoft.office DisableVisualBasicExternalDylibs -bool FALSEhttps://macadmins.software/docs/VBSecurityControls.pdf
42
Allcom.microsoft.officeDisableVisualBasicMacScriptBooleanYes16.16FALSEThe DisableVisualBasicMacScript setting determines if macros are allowed to invoke the MacScript() Visual Basic API. This API allows macros to execute arbitrary processes via AppleScript by including “do shell script ...” in the AppleScript code.
The default value for this setting allows using MacScript, as there are a number of legitimate uses of AppleScript that do not rely on external processes. When this setting is set to NO, macros that attempt to use MacScript will fail with an error at the point where MacScript is invoked.		defaults write com.microsoft.office DisableVisualBasicMacScript -bool FALSEhttps://macadmins.software/docs/VBSecurityControls.pdf
43
Allcom.microsoft.officeDisableVisualBasicToBindToPopenBooleanYes16.16FALSEThe DisableVisualBasicToBindToPopen setting determines if macros are allowed to use a DECLARE to bind to the popen() OS API. This API allows macros to execute arbitrary external processes and pass them arbitrary data on the command line.
The default value for this setting allows the binding, as at least one 3rd party vendor uses popen to communicate with their own code. When this setting is set to NO, macros that attempt to use popen() will fail with an error at the point where popen() is invoked.		defaults write com.microsoft.office DisableVisualBasicToBindToPopen -bool FALSEhttps://macadmins.software/docs/VBSecurityControls.pdf
44
Allcom.microsoft.officeHasUserSeenEnterpriseFREDialogBooleanYes16.28FALSEVolume License only. Setting this value to TRUE will suppress the new First Run Experience privacy dialog. There is no way to suppress this dialog for O365 users.defaults write com.microsoft.office HasUserSeenEnterpriseFREDialog -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1565725927223700
45
Allcom.microsoft.officeHaveMergedOldPrefsBooleanYes15.33.0FALSETriggers for pre 15.32 preferences to be migrated to the new domain going foward. In most cases you should NOT manage or touch this.defaults write com.microsoft.office HaveMergedOldPrefs -bool TRUE
46
Allcom.microsoft.officeInstallAutoUpdateBooleanYes16.24TRUEDisable the Office Suite installer from installing Auto Update.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
47
Allcom.microsoft.officeInstallExcelBooleanYes16.24TRUEDisable the Office Suite installer from installing Excel.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
48
Allcom.microsoft.officeInstallOneDriveBooleanYes16.24TRUEDisable the Office Suite installer from installing OneDrive.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
49
Allcom.microsoft.officeInstallOneNoteBooleanYes16.24TRUEDisable the Office Suite installer from installing OneNote.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
50
Allcom.microsoft.officeInstallOutlookBooleanYes16.24TRUEDisable the Office Suite installer from installing Outlook.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
51
Allcom.microsoft.officeInstallPowerPointBooleanYes16.24TRUEDisable the Office Suite installer from installing PowerPoint.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
52
Allcom.microsoft.officeInstallTeamsBooleanYes16.24TRUEDisable the Office Suite installer from installing Teams.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
53
Allcom.microsoft.officeInstallWordBooleanYes16.24TRUEDisable the Office Suite installer from installing Word.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist		https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
54
Allcom.microsoft.officekCUIThemePreferencesThemeKeyPathIntegerYes15.33.00 (Colorful)Sets Office theme:
0 - Colorful
1 - Classic
2 - Dark Mode (still in progress as of 16.14)		defaults write com.microsoft.office kCUIThemePreferencesThemeKeyPath -int 0https://macadmins.slack.com/archives/C07UZ1X7B/p1528897732000348
55
Allcom.microsoft.officekFREEnterpriseTelemetryInfoKeyBooleanYes16.27 ONLYFALSESuppresses a temporary Privacy and Services Update dialog in 16.27 ONLY.defaults write com.microsoft.office kFREEnterpriseTelemetryInfoKey -bool TRUEhttps://macadmins.software/docs/16.28-Privacy-Consent.key
56
Allcom.microsoft.officemsoridDefaultMinimumSeverityIntegerYes15.33.0nullSet value to 200 if msoridEnableLogging is enableddefaults write com.microsoft.office msoridDefaultMinimumSeverity -int 200
57
Allcom.microsoft.officemsoridEnableLoggingIntegerYes15.33.00Set to 1 to increase logging levels for authentication requestsdefaults write com.microsoft.office msoridEnableLogging -int 1https://macadmins.slack.com/archives/C07UZ1X7B/p1510921449000105
58
Allcom.microsoft.officeOfficeActivationEmailAddressStringYes
15.33.0
16.13.0*		nullSets value of 'Belongs to' field in the About Box. As of 16.13 this value additionally pre-fills the account authentication field for O365 users. (NOTE: 'Belongs to' does not appear for Volume License users for versions 16.13 through 16.28 but will return in 16.29.)defaults write com.microsoft.office OfficeActivationEmailAddress -string "jane.doe@example.com"
https://macadmins.slack.com/archives/C07UZ1X7B/p1523547599000305?thread_ts=1523547599.000305
https://macadmins.slack.com/archives/C07UZ1X7B/p1526327108000247
59
Allcom.microsoft.officeOfficeAutoSignInBooleanYes16.13.0FALSESuppresses first run windows. Only prompts user for needed information like a O365 authenticationdefaults write com.microsoft.office OfficeAutoSignIn -bool TRUE
http://www.office4mac.com/courses/take/mgmt300/lessons/3886727-automatic-sign-in
https://docs.microsoft.com/en-us/DeployOffice/mac/preferences-outlook#mailbox-settings
https://docs.microsoft.com/en-us/deployoffice/mac/deploy-mac-app-store#how-do-i-manage-office-policies-and-preferences-with-apps-downloaded-from-the-mac-app-store
60
Allcom.microsoft.office
OfficeExperiencesAnalyzingContentPreference
BooleanYes16.28TRUEConnected experiences that analyze your content are experiences that use your Office content to provide you with design recommendations, editing suggestions, data insights, and similar features. If you don't set this preference, connected experiences that analyze content are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-connected-experiences-that-analyze-your-content
61
Allcom.microsoft.office
OfficeExperiencesDownloadingContentPreference
BooleanYes16.28TRUEConnected experiences that download online content are experiences that allow you to search and download online content including templates, images, 3D models, videos, and reference materials to enhance your documents. If you don't set this preference, connected experiences that download online content are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-connected-experiences-that-download-online-content
62
Allcom.microsoft.officeOfficeWebAddinDisableAllCatalogsBooleanYes16.29FALSEPrevents all add-ins for Word, Excel, and PowerPoint from installing or running, even add-ins that are admin-managed.defaults write com.microsoft.office OfficeWebAddinDisableAllCatalogs -bool TRUEhttps://docs.microsoft.com/en-us/deployoffice/mac/preferences-add-ins
63
Allcom.microsoft.officeOfficeWebAddinDisableOMEXCatalogBooleanYes16.29FALSEPrevents users from installing and running Office add-ins for Word, Excel, and PowerPoint. Also disables default add-ins including Wikipedia, Bing Maps, People Graph, and Microsoft Visio Data Visualizer. Users are still able to run admin-managed add-ins.defaults write com.microsoft.office OfficeWebAddinDisableOMEXCatalog -bool TRUEhttps://docs.microsoft.com/en-us/deployoffice/mac/preferences-add-ins
64
Allcom.microsoft.officeOptionalConnectedExperiencesPreferenceBooleanYes16.28TRUEIn addition to the connected experiences mentioned above, there are some optional connected experiences that you may choose to allow your users to access. If you don't set this preference, optional connected experiences are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-optional-connected-experiences
65
Allcom.microsoft.officeSendAllTelemetryEnabledBooleanYes16.28TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Setting this to FALSE will override any setting in DiagnosticDataTypePreference and acts as a "kill-switch" for data.defaults write com.microsoft.office SendAllTelemetryEnabled -bool FALSEhttps://macadmins.software/docs/16.28-Privacy-Consent.key
66
Allcom.microsoft.officeShowDocStageOnLaunchBooleanYes15.36.0TRUEShow or Hide the Document selecter when you launch one of the MS Applicationsdefaults write com.microsoft.office ShowDocStageOnLaunch -bool FALSEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1506713968000569
67
Allcom.microsoft.officeShowWhatsNewOnLaunchBooleanYes15.34TRUEA setting of FALSE supresses all "What's new" messages for all suite apps: Word, PowerPoint, Excel, Outlook, and OneNote.defaults write com.microsoft.office ShowWhatsNewOnLaunch -bool FALSEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1492636076913449
68
Allcom.microsoft.officeTermsAccepted1809BooleanYes16.17FALSEIf you don't want your users to see the new MS Use Terms (Sept 2018) dialog, and instead auto-accept the terms on their behalf, set this value to True.defaults write com.microsoft.office TermsAccepted1809 -bool TRUEhttps://macadmins.slack.com/archives/C07UZ1X7B/p1536524701000100
69
Allcom.microsoft.officeVBAObjectModelIsTrustedBooleanYes16.21FALSEFor Office 2019 only: The VBAObjectModelIsTrusted setting determines if macros are allowed to modify the VB project itself through the VBA object model. The default value for this setting distrusts the VB object model and prevents macros from modifying the VB project. When this setting is set to NO, macros that attempt to invoke any method in the VB object model will fail with an error at that point in the code.defaults write com.microsoft.office VBAObjectModelIsTrusted -bool FALSEhttps://macadmins.software/docs/VBSecurityControls.pdf
70
Allcom.microsoft.officeVisualBasicMacroExecutionStateStringYes15.33.0DisabledWithWarningsSets the VisualBasic Macro security level. Valid values: DisabledWithoutWarnings, DisabledWithWarnings, EnabledWithoutWarningsdefaults write com.microsoft.office VisualBasicMacroExecutionState -string DisabledWithoutWarningshttps://macadmins.software/docs/VBSecurityControls.pdf
71
Allcom.microsoft.officeVisualBasicEntirelyDisabledBooleanYes16.32FALSEPreference to completely disable VBA.defaults write com.microsoft.office VisualBasicEntirelyDisabled -bool TRUEhttps://macadmins.software/matrix/
72
Othercom.microsoft.Office365ServiceV2SendAllTelemetryEnabledBooleanYes15.x - 16.24TRUEThis preference domain was completly removed in 16.24 but is still used for the 16.16.x line of 2016 updates.defaults write com.microsoft.Office365ServiceV2 SendAllTelemetryEnabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1565795925296800?thread_ts=1565795743.294700&cid=C07UZ1X7B
73
Allcom.microsoft.officeprefsDefaultsToLocalOpenSaveBooleanNo15.18-15.32FALSEDEPRECATED: When set to true will force the open/save panel to ‘On my Mac’ instead of 'Online Locations'defaults write $HOME/Library/Group\ Containers/UBF8T346G9.Office/com.microsoft.officeprefsDefaultsToLocalOpenSave -bool TRUEhttps://macadmins.slack.com/archives/microsoft-office/p1450417854005113
74
Allcom.microsoft.officeprefsVisualBasicMacroExecutionStateStringNo15.32.0DisabledWithWarningsDEPRECATED: Modify Visual Basic Macro state. Supported for Word, Excel, and Powerpoint. Valid values are: DisabledWithoutWarnings, DisabledWithWarnings, EnabledWithWarningsdefaults write $HOME/Library/Group\ Containers/UBF8T346G9.Office/com.microsoft.officeprefsVisualBasicMacroExecutionState -string DisabledWithWarningshttps://macadmins.slack.com/archives/microsoft-office/p1487873989010365
75
OneDrive (Standalone)com.microsoft.OneDriveAutomaticUploadBandwidthPercentageIntegerYesAutomatic upload bandwidth percentage. Enables the sync client to automatically set the amount of bandwidth used based on available bandwidth for uploading files. This parameter determines the percentage of local upload bandwidth that the sync client can use. Accepted values are from 1 through 99. defaults write com.microsoft.OneDrive AutomaticUploadBandwidthPercentage -int 100https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
76
OneDrive (Mac App Store)com.microsoft.OneDriveAutomaticUploadBandwidthPercentageIntegerYesAutomatic upload bandwidth percentage. Enables the sync client to automatically set the amount of bandwidth used based on available bandwidth for uploading files. This parameter determines the percentage of local upload bandwidth that the sync client can use. Accepted values are from 1 through 99. defaults write com.microsoft.OneDrive AutomaticUploadBandwidthPercentage -int 100https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
77
OneDrive (Standalone)com.microsoft.OneDriveDefaultFolderPathStringYesDefault folder location. Specifies the default location of the OneDrive folder for each organization. TenantID determines which accounts the default folder location setting should apply to. Find your Office 365 tenant ID
DefaultFolderPath (String): DefaultFolder specifies the default folder location.
Mac App Store:
The path must already exist when users set up the sync client.
Standalone:
The path will be created on users' computers if it doesn't already exist. Only with the Standalone sync client can you prevent users from changing the location. 		https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
78
OneDrive (Mac App Store)com.microsoft.OneDriveDefaultFolderPathStringYesDefault folder location. Specifies the default location of the OneDrive folder for each organization. TenantID determines which accounts the default folder location setting should apply to. Find your Office 365 tenant ID
DefaultFolderPath (String): DefaultFolder specifies the default folder location.
Mac App Store:
The path must already exist when users set up the sync client.
Standalone:
The path will be created on users' computers if it doesn't already exist. Only with the Standalone sync client can you prevent users from changing the location. 		https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
79
OneDrive (Standalone)com.microsoft.OneDriveDefaultToBusinessFREBooleanYesDefault to OneDrive Business instead of OneDrive Personal.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive DefaultToBusinessFRE -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
80
OneDrive (Mac App Store)com.microsoft.OneDriveDefaultToBusinessFREBooleanYesDefault to OneDrive Business instead of OneDrive Personal.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive DefaultToBusinessFRE -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
81
OneDrive (Standalone)com.microsoft.OneDriveDisableHydrationToastBooleanYesDisable download toasts. Prevents toasts from appearing when applications cause file contents to be downloaded. When set to true, toasts will not appear when applications trigger the download of file contents.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
82
OneDrive (Mac App Store)com.microsoft.OneDriveDisableHydrationToastBooleanYesDisable download toasts. Prevents toasts from appearing when applications cause file contents to be downloaded. When set to true, toasts will not appear when applications trigger the download of file contents.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
83
OneDrive (Standalone)com.microsoft.OneDriveDisablePersonalSyncBooleanYesDisable personal accounts. Blocks users from signing in and syncing files in personal OneDrive accounts. If this key is set after a user has set up sync with a personal account, the user will be signed out.
When set to true, this parameter prevents users from adding or syncing personal accounts. 		defaults write com.microsoft.OneDrive DisablePersonalSync -bool TRUEhttps://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
84
OneDrive (Mac App Store)com.microsoft.OneDriveDisablePersonalSyncBooleanYesDisable personal accounts. Blocks users from signing in and syncing files in personal OneDrive accounts. If this key is set after a user has set up sync with a personal account, the user will be signed out.
When set to true, this parameter prevents users from adding or syncing personal accounts. 		defaults write com.microsoft.OneDrive DisablePersonalSync -bool TRUEhttps://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
85
OneDrive (Standalone)com.microsoft.OneDriveDownloadBandwidthLimitedIntegerYesSet maximum download throughput. Sets the maximum download throughput rate in kilobytes (KB)/sec for computers running the OneDrive sync client. This parameter determines the download throughput in KB/sec that the sync client can use. The minimum rate is 50 KB/sec and the maximum rate is 100,000 KB/sec.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
86
OneDrive (Mac App Store)com.microsoft.OneDriveDownloadBandwidthLimitedIntegerYesSet maximum download throughput. Sets the maximum download throughput rate in kilobytes (KB)/sec for computers running the OneDrive sync client. This parameter determines the download throughput in KB/sec that the sync client can use. The minimum rate is 50 KB/sec and the maximum rate is 100,000 KB/sec.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
87
OneDrive (Standalone)com.microsoft.OneDriveEnableAddAccountsBooleanYesAllow users to add accounts to OneDrive.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive EnableAddAccounts -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
88
OneDrive (Mac App Store)com.microsoft.OneDriveEnableAddAccountsBooleanYesAllow users to add accounts to OneDrive.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive EnableAddAccounts -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
89
OneDrive (Standalone)com.microsoft.OneDriveFilesOnDemandEnabledBooleanYesEnable Files On-Demand. Specifies whether Files On-Demand is enabled. If you don't set this setting, Files On-Demand will be enabled automatically as we roll out the feature, and users can turn the setting on or off. When set to true, new users who set up the sync client will download online-only files by default. When set to false, Files On-Demand will be disabled and users won't be able to turn it on.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
90
OneDrive (Mac App Store)com.microsoft.OneDriveFilesOnDemandEnabledBooleanYesEnable Files On-Demand. Specifies whether Files On-Demand is enabled. If you don't set this setting, Files On-Demand will be enabled automatically as we roll out the feature, and users can turn the setting on or off. When set to true, new users who set up the sync client will download online-only files by default. When set to false, Files On-Demand will be disabled and users won't be able to turn it on.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
91
OneDrive (Standalone)com.microsoft.OneDriveHideDockIconBooleanYesDock icon. Specifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. defaults write com.microsoft.OneDrive HideDockIcon -bool TRUEhttps://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
92
OneDrive (Mac App Store)com.microsoft.OneDriveHideDockIconBooleanYesDock icon. Specifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. defaults write com.microsoft.OneDrive HideDockIcon -bool TRUEhttps://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
93
OneDrive (Standalone)com.microsoft.OneDriveHydrationDisallowedAppsStringYesBlock apps from downloading online-only files. Prevents applications from automatically downloading online-only files. You can use this setting to lock down applications that don't work correctly with your deployment of Files On-Demand.
Json in the following format:

[{"ApplicationId":"appId","MaxBundleVersion":"1.1","MaxBuildVersion":"1.0"}]

"AppID" can be either the BSD process name or the bundle display name. MaxBuildVersion denotes the maximum build version of the application that will be blocked. MaxBundleVersion denotes the maximum bundle version of the application that will be blocked.		https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
94
OneDrive (Mac App Store)com.microsoft.OneDriveHydrationDisallowedAppsStringYesBlock apps from downloading online-only files. Prevents applications from automatically downloading online-only files. You can use this setting to lock down applications that don't work correctly with your deployment of Files On-Demand.
Json in the following format:

[{"ApplicationId":"appId","MaxBundleVersion":"1.1","MaxBuildVersion":"1.0"}]

"AppID" can be either the BSD process name or the bundle display name. MaxBuildVersion denotes the maximum build version of the application that will be blocked. MaxBundleVersion denotes the maximum bundle version of the application that will be blocked.		https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
95
OneDrive (Standalone)com.microsoft.OneDriveIsBusinessProvisionedBooleanYes
DEPRECATED
https://macadmins.slack.com/archives/C1HNS6CTB/p1497298573587335
defaults write com.microsoft.OneDrive IsBusinessProvisioned -bool TRUE
96
OneDrive (Mac App Store)com.microsoft.OneDriveIsBusinessProvisionedBooleanYes
DEPRECATED
https://macadmins.slack.com/archives/C1HNS6CTB/p1497298573587335
defaults write com.microsoft.OneDrive IsBusinessProvisioned -bool TRUE
97
OneDrive (Standalone)com.microsoft.OneDriveOpenAtLoginBooleanYesSpecifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
98
OneDrive (Mac App Store)com.microsoft.OneDriveOpenAtLoginBooleanYesSpecifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
99
OneDrive (Standalone)com.microsoft.OneDriveSharePointOnPremFrontDoorUrlStringYesSharePoint Server Front Door URL. Specifies the SharePoint Server 2019 on-premises URL that the OneDrive sync client should try to authenticate and sync against. The URL of the on-premises SharePoint Server.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
100
OneDrive (Mac App Store)com.microsoft.OneDriveSharePointOnPremFrontDoorUrlStringYesSharePoint Server Front Door URL. Specifies the SharePoint Server 2019 on-premises URL that the OneDrive sync client should try to authenticate and sync against. The URL of the on-premises SharePoint Server.https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos