ABCDEFGHIJKLMNOPQRSTUVWXYZAAABACAD
1
ApplicationDomainKeyTypeProfile ManageableSupported Software VersionDefault ValueCommentsExample CommandLink 1Link 2
2
Othercom.microsoft.autoupdate.fbaSendAllTelemetryEnabledBooleanYes15.x - 16.27TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. This key was removed in 16.27 / MAU 4.12 and there is nothing left to manage in this preference domain.defaults write com.microsoft.autoupdate.fba SendAllTelemetryEnabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1565795925296800
3
MAUcom.microsoft.autoupdate2AcknowledgedDataCollectionPolicyStringYesMAU 4.12
(16.27.0)		RequiredDataOnlyThe first time 4.12 or later of MAU is launched, users will see a Required Data Notice dialog. If you don't want your users to see this dialog, you can set the preference to either RequiredDataOnly or RequiredAndOptionalData. Regardless of which value you set, the dialog won't be shown to your users. If you let your users see this dialog, then when the user chooses OK, the value RequiredDataOnly is written and the dialog is not shown to the user again.defaults write com.microsoft.autoupdate2 AcknowledgedDataCollectionPolicy RequiredDataOnly
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-the-required-data-notice-dialog-for-microsoft-autoupdate
4
MAUcom.microsoft.autoupdate2ApplicationsDictionaryYesRegister applications that MAU should update. If this is not managed MAU might have issues finding updates for applications that a user has never opened.https://github.com/pbowden-msft/Payloads
5
MAUcom.microsoft.autoupdate2ChannelNameStringYesMAU 3.3 (15.17.0)Production (Inferred)Set the update channel. Valid arguments: Production, External, InsiderFast, Custom. defaults write com.microsoft.autoupdate2 ChannelName -string 'Custom'
https://macadmins.software/docs/MAU_CachingServer.pdf
https://macadmins.slack.com/archives/C07UZ1X7B/p1449904185003906
6
MAUcom.microsoft.autoupdate2DisableEndOfSupportNotificationsBooleanYesFALSESet to TRUE to prevent Office 2016 end of support notificationdefaults write com.microsoft.autoupdate2 DisableEndOfSupportNotifications -boolean TRUE
https://macadmins.slack.com/archives/C29PWTQFM/p1589833927118300
7
MAUcom.microsoft.autoupdate2DisableInsiderCheckboxBooleanYesMAU 3.4 (15.18.0)FALSESet to true to make the "Join the Office Insider Program..." checkbox unavailable/greyed out to usersdefaults write com.microsoft.autoupdate2 DisableInsiderCheckbox -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1450416999005107
8
MAUcom.microsoft.autoupdate2EnableCheckForUpdatesButtonBooleanYesMAU 3.18TRUEEnables/disables the Check For Updates button in the MAU GUI.defaults write com.microsoft.autoupdate2 EnableCheckForUpdatesButton -bool FALSE
https://macadmins.slack.com/archives/C8J5E5VPW/p1525938524000340
9
MAUcom.microsoft.autoupdate2ExtendedLoggingBooleanYesMAU 3.8 (15.27.0)Enable extended logging for the MAU client. Writes to /Library/Logs/Microsoft/autoupdate.logdefaults write com.microsoft.autoupdate2 ExtendedLogging -bool TRUE
https://macadmins.software/docs/MAU_38.pdf
https://derflounder.wordpress.com/2017/02/03/enabling-debug-logging-for-microsoft-autoupdate/
10
MAUcom.microsoft.autoupdate2HowToCheckStringYesMAU 3.8AutomaticCheckChange how MAU interacts with updates. Note that AutomaticDownload will do a download and install silently if possible. Valid values are: Manual, AutomaticCheck, AutomaticDownloaddefaults write com.microsoft.autoupdate2 HowToCheck -string 'AutomaticDownload'
https://macadmins.software/docs/MAU_38.pdf
https://macadmins.slack.com/archives/C07UZ1X7B/p1477504848005916
11
MAUcom.microsoft.autoupdate2ManifestServerStringYesMAU 3.8 (15.27.0)Set a custom manifest server. Useful for "locking" clients to a specific version of Office.defaults write com.microsoft.autoupdate2 ManifestServer -string 'https://server/folder/'
https://macadmins.software/docs/MAU_CachingServer.pdf
12
MAUcom.microsoft.autoupdate2SendAllTelemetryEnabledBooleanYesMAU 3.x - MAU 4.11TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Replaced by AcknowledgedDataCollectionPolicy in MAU 4.12.defaults write com.microsoft.autoupdate2 SendAllTelemetryEnabled -bool TRUE
13
MAUcom.microsoft.autoupdate2StartDaemonOnAppLaunchBooleanYesTRUEControls whether the ‘Microsoft AU Daemon’ should be launched when an Office application is launched. If this value is set to 0, updates will not be detected, regardless of the ‘HowToCheck’ preference, and users will need to use the Help -> Check for Updates menu option to see if updates are available.defaults write com.microsoft.autoupdate2 St
artDaemonOnAppLaunch -bool FALSE
https://macadmins.software/docs/MAU_38.pdf
14
MAUcom.microsoft.autoupdate2UpdateCacheStringYesMAU 3.8 (15.27.0)Set a custom cache for clients to use when checking for updates. IE - packages, dmgs.defaults write com.microsoft.autoupdate2 UpdateCache -string 'https://server/folder/'
https://macadmins.software/docs/MAU_CachingServer.pdf
15
MAUcom.microsoft.autoupdate2UpdateCheckFrequencyIntegerYes3.9.1720Change how often the MAU daemon will look for updates. By default this is 720 min (12 hrs). By reducing this value MAU will look for updates sooner without having to delete the LastUpdate key.defaults write com.microsoft.autoupdate2 UpdateCheckFrequency -int 120
https://macadmins.slack.com/archives/C07UZ1X7B/p1493835630209456
https://macadmins.slack.com/archives/C07UZ1X7B/p1516307505000122
16
MAUcom.microsoft.autoupdate2
UpdateDeadline.ApplicationsForcedUpdateSchedule
DictionaryYes4.13+Using this preference, MacAdmins can set specific deadlines perapp per version, by defining a dictionary, for example:
<key>UpdateDeadline.ApplicationsForcedUpdateSchedule</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>ForcedUpdateDate</key>
<date>2019-07-20T20:01:20Z</date>
<key>ForcedUpdateVersion</key>
<string>16.26.19060901</string>
</dict>
</dict>
https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
17
MAUcom.microsoft.autoupdate2UpdateDeadline.DaysBeforeForcedQuitIntegerYes4.13+This preference is mandatory to set in order to use the MAU Update Deadline feature and does not have any default values. The above setting will enable MAU to enforce an update within 5 days of its detection. The same pref can also be used to setup deadline for specific apps, for example:
<key>Applications</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>LCID</key>
<integer>1033</integer>
<key>UpdateDeadline.DaysBeforeForcedQuit</key>
<integer>5</integer>
</dict>
</dict>
https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
18
MAUcom.microsoft.autoupdate2UpdateDeadline.FinalCountDownIntegerYes4.48+60IT admins can now override the default deadline time of 60 minutes
https://docs.microsoft.com/en-us/officeupdates/release-history-microsoft-autoupdate#june-2022-release
19
MAUcom.microsoft.autoupdate2UpdateDeadline.StartAutomaticUpdatesIntegerYes4.13+3This is an optional preference, which will turn on the Automatic Download and Install mode on MAU irrespective of the current MAU settings on the device. By default it is set to 3 days or 72 hours before the actual update deadline. Once the deadline is past, the preference will revert to the value set prior to turning on Automatic Download and Install mode. for example:
<key>UpdateDeadline.StartAutomaticUpdates</key>
<integer>3</integer>
https://docs.microsoft.com/en-us/deployoffice/mac/mau-deadline
https://www.kevinmcox.com/2019/07/forcing-microsoft-office-update-deadlines-with-mau/
20
MAUcom.microsoft.autoupdate2UpdaterOptimizationStringYes4.40+SizeIf you have a security agent like CrowdStrike installed and updates cause beachballs; Set UpdaterOptimization preference to "CPU" to prefer file-based delta updates (instead of binary deltas). The trade-off will be larger monthly updates.defaults write com.microsoft.autoupdate2 UpdaterOptimization -string 'CPU'
https://stream.lib.utah.edu/index.php?c=details&id=13476
21
MERcom.microsoft.errorreportingIsAttachedEnabledBooleanYesTRUEDisable attaching the file that caused the crash in the crash report. If you are working in a sensitive business it is recommended to set this to false.defaults write com.microsoft.errorreporting IsAttachedEnabled -bool FALSE
22
MERcom.microsoft.errorreportingIsStoreLastCrashEnabledBooleanYes15.28.0FALSEWill store the last crash report in the following path which can be helpful for debugging. ~/Library/Group Containers/UBF8T346G9.ms/MerpTempItemsdefaults write com.microsoft.errorreporting IsStoreLastCrashEnabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1479236973009705
23
MERcom.microsoft.errorreporting
SendCrashReportsEvenWithTelemetryDisabled
BooleanYesFALSEDisable upload of telemetry data in Crash Reportsdefaults write com.microsoft.errorreporting SendCrashReportsEvenWithTelemetryDisabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1524246348000451
24
Excelcom.microsoft.ExcelkFREEnterpriseTelemetryInfoKeyBooleanYes16.27 ONLYFALSESuppresses a temporary Privacy and Services Update dialog in 16.27 ONLY. (Was previously used for a similar purpose in 16.13.1 but the key was recycled.)defaults write com.microsoft.Excel kFREEnterpriseTelemetryInfoKey -bool TRUE
https://macadmins.software/docs/16.28-Privacy-Consent.key
25
Excelcom.microsoft.ExcelkFREIntelligenceServicesConsentV2KeyBooleanYes16.17 - 16.27Users who are activated with O365 will see a new "Use Intelligent Services?" pop-up dialog in Word, Excel & PowerPoint after updating to 16.17. The net effect of doing this will enable Researcher (Word), Translate (Word, Excel, PowerPoint), Smart Lookup (Word, PowerPoint), and QuickStarter (PowerPoint). Set to TRUE to auto-accept. Requires "PII_And_Intelligent_Services_Preference" as well.defaults write com.microsoft.Excel kFREIntelligenceServicesConsentV2Key -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1536696868000100
26
Excelcom.microsoft.ExcelkFRETelemetryConsentKeyBooleanYes16.13.1FALSEMSA-based Key to suppress a screen on update from pre-16.13 called "Connected Services" with an Accept button on it. If you wish to suppress this new dialog for MSA-based accounts set this key to TRUE.defaults write com.microsoft.Excel kFRETelemetryConsentKey -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1527191452000462
27
Excelcom.microsoft.ExcelkSubUIAppCompletedFirstRunSetup1507BooleanYes15.x - 16.16.xFALSEControls the original "What's New" dialog and Office 365 activation prompt on first launch. Replaced by OfficeAutoSignIn starting in version 16.17.defaults write com.microsoft.Excel kSubUIAppCompletedFirstRunSetup1507 -bool TRUE
https://derflounder.wordpress.com/2016/01/17/suppressing-office-2016s-first-run-dialog-windows/
28
Excelcom.microsoft.ExcelNSRequiresAquaSystemAppearanceBooleanYes16.20FALSEDisable macOS Dark Mode settings for application.defaults write com.microsoft.Excel NSRequiresAquaSystemAppearance -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1544660345485200
29
Excelcom.microsoft.ExcelOUIWhatsNewShownItemIdsArrayYes15.32Controls the dynamic "What's New" dialog on first lauch after upgrades. An array of sequential ints. Can still be managed, but the new suite-wide 'ShowWhatsNewOnLaunch' key in 15.34 is the preferred method to disable all dialogs.defaults write com.microsoft.Excel OUIWhatsNewShownItemIds -array-add -int 1 -int 2
30
Excelcom.microsoft.ExcelPII_And_Intelligent_Services_PreferenceBooleanYes16.17 - 16.27Users who are activated with O365 will see a new "Use Intelligent Services?" pop-up dialog in Word, Excel & PowerPoint after updating to 16.17. The net effect of doing this will enable Researcher (Word), Translate (Word, Excel, PowerPoint), Smart Lookup (Word, PowerPoint), and QuickStarter (PowerPoint). Set to TRUE to auto-accept. Requires "kFREIntelligenceServicesConsentV2Key" as well.defaults write com.microsoft.Excel PII_And_Intelligent_Services_Preference -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1536170480000100?thread_ts=1536170480.000100
31
Excelcom.microsoft.ExcelSendAllTelemetryEnabledBooleanYes15.x - 16.27TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Replaced by a setting in com.microsoft.office for version 16.28+.defaults write com.microsoft.Excel SendAllTelemetryEnabled -bool TRUE
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-in-gcc-high-dod#turn-off-sending-telemetry-data-to-microsoft-from-office-for-mac
https://docs.microsoft.com/en-us/office365/enterprise/network-requests-in-office-2016-for-mac#telemetry
32
Excelcom.microsoft.ExcelSendASmileEnabledBooleanYesTRUEThis key when set to false will deactivate the ability for users to use the "Smile" feature.defaults write com.microsoft.Excel SendASmileEnabled -bool FALSE
33
Excelcom.microsoft.Excel
SendCrashReportsEvenWithTelemetryDisabled
BooleanYesThis will stop your client devices sending us usage telemetry and asking questions to your users, but if the app crashes, we'll still invoke our Error Reporting dialog and get the call-stack back here so we can see if you're running into problems. The issue here is that if you don't enable crash reporting, we are completely blind as to whether folks out there are having problems or not. Relevant for those who disable telemetry through the SendAllTelemetryEnabled key.defaults write com.microsoft.Excel SendCrashReportsEvenWithTelemetryDisabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1536706447000100
34
Excelcom.microsoft.ExcelSignInOptionsIntegerYes15.27.0-15.41.0
16.13.0*		nullThis will prevent user from signing in to any O365 service. This has the added effect of making sure users store no data online via microsoft servers.

* As of 16.13.0 these options work again.
0 - all accounts allowed
1 - prevent institutional accounts - only MSA (personal) accounts
2 - prevent MSA (personal) accounts - only institution accounts
4 - no accounts allowed to sign in		defaults write com.microsoft.Excel SignInOptions -int 4
35
Excelcom.microsoft.ExcelTryDefaultPasswordBooleanYes16.20TRUEBy default, when Excel opens an encrypted file, Excel tries to use a default password to decrypt the file. This preference prevents Excel, version 16.20 or higher, from trying a default decryption password.defaults write com.microsoft.Excel TryDefaultPassword -bool FALSE
https://docs.microsoft.com/en-us/deployoffice/mac/set-preference-default-password-excel
36
Allcom.microsoft.officeAllowVisualBasicToBindToSystemBooleanYes15.31FALSEThe AllowVisualBasicToBindToSystem setting determines if macros are allowed to use a DECLARE to bind to the system()
OS API. This API allows macros to execute arbitrary external processes and pass them arbitrary data on the command line.
The default value for this setting disallows the binding, as the system() API should not be used. When this setting is set to NO, macros that attempt to use system() will fail with an error at the point where system() is invoked.		defaults write com.microsoft.office AllowVisualBasicToBindToSystem -bool FALSE
https://macadmins.software/docs/VBSecurityControls.pdf
37
Allcom.microsoft.officeConnectedOfficeExperiencesPreferenceBooleanYes16.28TRUEYou can use this preference to control whether most connected experiences are available to your users.defaults write com.microsoft.office ConnectedOfficeExperiencesPreference -bool FALSE
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-most-connected-experiences
38
Allcom.microsoft.officeDefaultsToLocalOpenSaveBooleanYes15.33.0FALSEWhen set to true will force the open/save panel to ‘On my Mac’ instead of 'Online Locations'defaults write com.microsoft.office DefaultsToLocalOpenSave -bool TRUE
https://derflounder.wordpress.com/2017/04/17/office-2016-defaultstolocalopensave-setting-change-as-of-office-2016-15-33-x/
39
Allcom.microsoft.officeDiagnosticDataTypePreferenceStringYes16.28FullDiagnosticDataIf you don't set this preference, both optional and required diagnostic data (Full) is sent to Microsoft. Valid options are:
BasicDiagnosticData (this sets the level to Required)
FullDiagnosticData (this sets the level to Optional)
ZeroDiagnosticData (this sets the level to Neither)
Descriptions of these levels are available in the linked documentation.		defaults write com.microsoft.office DiagnosticDataTypePreference -string BasicDiagnosticData
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences
40
Allcom.microsoft.officeDisableVisualBasicExternalDylibsBooleanYes15.31FALSEThe DisableVisualBasicExternalDylibs setting determines if macros are allowed to use a
DECLARE statement to bind a Visual Basic symbol name to an external procedure in the local OS. The
default value for this setting is to allow binding to external dylibs because many legitimate 3rd party
addin vendors use this feature of Visual Basic to add and extend features in Office for Mac. When this setting is set to NO, macros that attempt to use a DECLARE statement will fail with an error at the point where the external procedure is invoked.		defaults write com.microsoft.office DisableVisualBasicExternalDylibs -bool FALSE
https://macadmins.software/docs/VBSecurityControls.pdf
41
Allcom.microsoft.officeDisableVisualBasicMacScriptBooleanYes16.16FALSEThe DisableVisualBasicMacScript setting determines if macros are allowed to invoke the MacScript() Visual Basic API. This API allows macros to execute arbitrary processes via AppleScript by including “do shell script ...” in the AppleScript code.
The default value for this setting allows using MacScript, as there are a number of legitimate uses of AppleScript that do not rely on external processes. When this setting is set to NO, macros that attempt to use MacScript will fail with an error at the point where MacScript is invoked.		defaults write com.microsoft.office DisableVisualBasicMacScript -bool FALSE
https://macadmins.software/docs/VBSecurityControls.pdf
42
Allcom.microsoft.officeDisableVisualBasicToBindToPopenBooleanYes16.16FALSEThe DisableVisualBasicToBindToPopen setting determines if macros are allowed to use a DECLARE to bind to the popen() OS API. This API allows macros to execute arbitrary external processes and pass them arbitrary data on the command line.
The default value for this setting allows the binding, as at least one 3rd party vendor uses popen to communicate with their own code. When this setting is set to NO, macros that attempt to use popen() will fail with an error at the point where popen() is invoked.		defaults write com.microsoft.office DisableVisualBasicToBindToPopen -bool FALSE
https://macadmins.software/docs/VBSecurityControls.pdf
43
Allcom.microsoft.officeHasUserSeenEnterpriseFREDialogBooleanYes16.28FALSEVolume License only. Setting this value to TRUE will suppress the new First Run Experience privacy dialog. There is no way to suppress this dialog for O365 users.defaults write com.microsoft.office HasUserSeenEnterpriseFREDialog -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1565725927223700
44
Allcom.microsoft.officeHaveMergedOldPrefsBooleanYes15.33.0FALSETriggers for pre 15.32 preferences to be migrated to the new domain going foward. In most cases you should NOT manage or touch this.defaults write com.microsoft.office HaveMergedOldPrefs -bool TRUE
45
Allcom.microsoft.officeInstallAutoUpdateBooleanYes16.24TRUEDisable the Office Suite installer from installing Auto Update.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
46
Allcom.microsoft.officeInstallExcelBooleanYes16.24TRUEDisable the Office Suite installer from installing Excel.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
47
Allcom.microsoft.officeInstallOneDriveBooleanYes16.24TRUEDisable the Office Suite installer from installing OneDrive.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
48
Allcom.microsoft.officeInstallOneNoteBooleanYes16.24TRUEDisable the Office Suite installer from installing OneNote.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
49
Allcom.microsoft.officeInstallOutlookBooleanYes16.24TRUEDisable the Office Suite installer from installing Outlook.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
50
Allcom.microsoft.officeInstallPowerPointBooleanYes16.24TRUEDisable the Office Suite installer from installing PowerPoint.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
51
Allcom.microsoft.officeInstallTeamsBooleanYes16.24TRUEDisable the Office Suite installer from installing Teams.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
52
Allcom.microsoft.officeInstallWordBooleanYes16.24TRUEDisable the Office Suite installer from installing Word.
Only valid if set with a configuration profile or if written to /Library/Managed Preferences/com.microsoft.office.plist
https://macadmins.slack.com/archives/C07UZ1X7B/p1554308409392900
53
Allcom.microsoft.officekCUIThemePreferencesThemeKeyPathIntegerYes15.33.00 (Colorful)Sets Office theme:
0 - Colorful
1 - Classic
2 - Dark Mode (still in progress as of 16.14)		defaults write com.microsoft.office kCUIThemePreferencesThemeKeyPath -int 0
https://macadmins.slack.com/archives/C07UZ1X7B/p1528897732000348
54
Allcom.microsoft.officekFREEnterpriseTelemetryInfoKeyBooleanYes16.27 ONLYFALSESuppresses a temporary Privacy and Services Update dialog in 16.27 ONLY.defaults write com.microsoft.office kFREEnterpriseTelemetryInfoKey -bool TRUE
https://macadmins.software/docs/16.28-Privacy-Consent.key
55
Allcom.microsoft.officemsoridDefaultMinimumSeverityIntegerYes15.33.0nullSet value to 200 if msoridEnableLogging is enableddefaults write com.microsoft.office msoridDefaultMinimumSeverity -int 200
56
Allcom.microsoft.officemsoridEnableLoggingIntegerYes15.33.00Set to 1 to increase logging levels for authentication requestsdefaults write com.microsoft.office msoridEnableLogging -int 1
https://macadmins.slack.com/archives/C07UZ1X7B/p1510921449000105
57
Allcom.microsoft.officeOfficeActivationEmailAddressStringYes
15.33.0
16.13.0*		nullSets value of 'Belongs to' field in the About Box. As of 16.13 this value additionally pre-fills the account authentication field for O365 users. (NOTE: 'Belongs to' does not appear for Volume License users for versions 16.13 through 16.28 but will return in 16.29.)defaults write com.microsoft.office OfficeActivationEmailAddress -string "jane.doe@example.com"
https://macadmins.slack.com/archives/C07UZ1X7B/p1523547599000305?thread_ts=1523547599.000305
https://macadmins.slack.com/archives/C07UZ1X7B/p1526327108000247
58
Allcom.microsoft.officeOfficeAutoSignInBooleanYes16.13.0FALSESuppresses first run windows. Only prompts user for needed information like a O365 authenticationdefaults write com.microsoft.office OfficeAutoSignIn -bool TRUE
http://www.office4mac.com/courses/take/mgmt300/lessons/3886727-automatic-sign-in
https://docs.microsoft.com/en-us/DeployOffice/mac/preferences-outlook#mailbox-settings
https://docs.microsoft.com/en-us/deployoffice/mac/deploy-mac-app-store#how-do-i-manage-office-policies-and-preferences-with-apps-downloaded-from-the-mac-app-store
59
Allcom.microsoft.office
OfficeExperiencesAnalyzingContentPreference
BooleanYes16.28TRUEConnected experiences that analyze your content are experiences that use your Office content to provide you with design recommendations, editing suggestions, data insights, and similar features. If you don't set this preference, connected experiences that analyze content are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-connected-experiences-that-analyze-your-content
60
Allcom.microsoft.office
OfficeExperiencesDownloadingContentPreference
BooleanYes16.28TRUEConnected experiences that download online content are experiences that allow you to search and download online content including templates, images, 3D models, videos, and reference materials to enhance your documents. If you don't set this preference, connected experiences that download online content are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-connected-experiences-that-download-online-content
61
Allcom.microsoft.officeOfficeWebAddinDisableAllCatalogsBooleanYes16.29FALSEPrevents all add-ins for Word, Excel, and PowerPoint from installing or running, even add-ins that are admin-managed.defaults write com.microsoft.office OfficeWebAddinDisableAllCatalogs -bool TRUE
https://docs.microsoft.com/en-us/deployoffice/mac/preferences-add-ins
62
Allcom.microsoft.officeOfficeWebAddinDisableOMEXCatalogBooleanYes16.29FALSEPrevents users from installing and running Office add-ins for Word, Excel, and PowerPoint. Also disables default add-ins including Wikipedia, Bing Maps, People Graph, and Microsoft Visio Data Visualizer. Users are still able to run admin-managed add-ins.defaults write com.microsoft.office OfficeWebAddinDisableOMEXCatalog -bool TRUE
https://docs.microsoft.com/en-us/deployoffice/mac/preferences-add-ins
63
Allcom.microsoft.officeOptionalConnectedExperiencesPreferenceBooleanYes16.28TRUEIn addition to the connected experiences mentioned above, there are some optional connected experiences that you may choose to allow your users to access. If you don't set this preference, optional connected experiences are available to users.NOTE: Attempting to use a defaults command for this preference will rarely work as the setting will get overwritten by the new roaming service. A configuration profile is required for managment.
https://docs.microsoft.com/en-us/deployoffice/privacy/mac-privacy-preferences#preference-setting-for-optional-connected-experiences
64
Allcom.microsoft.officeSendAllTelemetryEnabledBooleanYes16.28TRUESet to false to send minimal heartbeat data, no application usage, and no environment details. Setting this to FALSE will override any setting in DiagnosticDataTypePreference and acts as a "kill-switch" for data.defaults write com.microsoft.office SendAllTelemetryEnabled -bool FALSE
https://macadmins.software/docs/16.28-Privacy-Consent.key
65
Allcom.microsoft.officeShowDocStageOnLaunchBooleanYes15.36.0TRUEShow or Hide the Document selecter when you launch one of the MS Applicationsdefaults write com.microsoft.office ShowDocStageOnLaunch -bool FALSE
https://macadmins.slack.com/archives/C07UZ1X7B/p1506713968000569
66
Allcom.microsoft.officeShowWhatsNewOnLaunchBooleanYes15.34TRUEA setting of FALSE supresses all "What's new" messages for all suite apps: Word, PowerPoint, Excel, Outlook, and OneNote.defaults write com.microsoft.office ShowWhatsNewOnLaunch -bool FALSE
https://macadmins.slack.com/archives/C07UZ1X7B/p1492636076913449
67
Allcom.microsoft.officeTermsAccepted1809BooleanYes16.17FALSEIf you don't want your users to see the new MS Use Terms (Sept 2018) dialog, and instead auto-accept the terms on their behalf, set this value to True.defaults write com.microsoft.office TermsAccepted1809 -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1536524701000100
68
Allcom.microsoft.officeVBAObjectModelIsTrustedBooleanYes16.21FALSEFor Office 2019 only: The VBAObjectModelIsTrusted setting determines if macros are allowed to modify the VB project itself through the VBA object model. The default value for this setting distrusts the VB object model and prevents macros from modifying the VB project. When this setting is set to NO, macros that attempt to invoke any method in the VB object model will fail with an error at that point in the code.defaults write com.microsoft.office VBAObjectModelIsTrusted -bool FALSE
https://macadmins.software/docs/VBSecurityControls.pdf
69
Allcom.microsoft.officeVisualBasicMacroExecutionStateStringYes15.33.0DisabledWithWarningsSets the VisualBasic Macro security level. Valid values: DisabledWithoutWarnings, DisabledWithWarnings, EnabledWithoutWarningsdefaults write com.microsoft.office VisualBasicMacroExecutionState -string DisabledWithoutWarnings
https://macadmins.software/docs/VBSecurityControls.pdf
70
Allcom.microsoft.officeVisualBasicEntirelyDisabledBooleanYes16.32FALSEPreference to completely disable VBA.defaults write com.microsoft.office VisualBasicEntirelyDisabled -bool TRUEhttps://macadmins.software/matrix/
71
Othercom.microsoft.Office365ServiceV2SendAllTelemetryEnabledBooleanYes15.x - 16.24TRUEThis preference domain was completly removed in 16.24 but is still used for the 16.16.x line of 2016 updates.defaults write com.microsoft.Office365ServiceV2 SendAllTelemetryEnabled -bool TRUE
https://macadmins.slack.com/archives/C07UZ1X7B/p1565795925296800?thread_ts=1565795743.294700&cid=C07UZ1X7B
72
Allcom.microsoft.officeprefsDefaultsToLocalOpenSaveBooleanNo15.18-15.32FALSEDEPRECATED: When set to true will force the open/save panel to ‘On my Mac’ instead of 'Online Locations'defaults write $HOME/Library/Group\ Containers/UBF8T346G9.Office/com.microsoft.officeprefsDefaultsToLocalOpenSave -bool TRUE
https://macadmins.slack.com/archives/microsoft-office/p1450417854005113
73
Allcom.microsoft.officeprefsVisualBasicMacroExecutionStateStringNo15.32.0DisabledWithWarningsDEPRECATED: Modify Visual Basic Macro state. Supported for Word, Excel, and Powerpoint. Valid values are: DisabledWithoutWarnings, DisabledWithWarnings, EnabledWithWarningsdefaults write $HOME/Library/Group\ Containers/UBF8T346G9.Office/com.microsoft.officeprefsVisualBasicMacroExecutionState -string DisabledWithWarnings
https://macadmins.slack.com/archives/microsoft-office/p1487873989010365
74
OneDrive (Standalone)com.microsoft.OneDriveAutomaticUploadBandwidthPercentageIntegerYesAutomatic upload bandwidth percentage. Enables the sync client to automatically set the amount of bandwidth used based on available bandwidth for uploading files. This parameter determines the percentage of local upload bandwidth that the sync client can use. Accepted values are from 1 through 99. defaults write com.microsoft.OneDrive AutomaticUploadBandwidthPercentage -int 100
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
75
OneDrive (Mac App Store)com.microsoft.OneDriveAutomaticUploadBandwidthPercentageIntegerYesAutomatic upload bandwidth percentage. Enables the sync client to automatically set the amount of bandwidth used based on available bandwidth for uploading files. This parameter determines the percentage of local upload bandwidth that the sync client can use. Accepted values are from 1 through 99. defaults write com.microsoft.OneDrive AutomaticUploadBandwidthPercentage -int 100
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
76
OneDrive (Standalone)com.microsoft.OneDriveDefaultFolderPathStringYesDefault folder location. Specifies the default location of the OneDrive folder for each organization. TenantID determines which accounts the default folder location setting should apply to. Find your Office 365 tenant ID
DefaultFolderPath (String): DefaultFolder specifies the default folder location.
Mac App Store:
The path must already exist when users set up the sync client.
Standalone:
The path will be created on users' computers if it doesn't already exist. Only with the Standalone sync client can you prevent users from changing the location.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
77
OneDrive (Mac App Store)com.microsoft.OneDriveDefaultFolderPathStringYesDefault folder location. Specifies the default location of the OneDrive folder for each organization. TenantID determines which accounts the default folder location setting should apply to. Find your Office 365 tenant ID
DefaultFolderPath (String): DefaultFolder specifies the default folder location.
Mac App Store:
The path must already exist when users set up the sync client.
Standalone:
The path will be created on users' computers if it doesn't already exist. Only with the Standalone sync client can you prevent users from changing the location.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
78
OneDrive (Standalone)com.microsoft.OneDriveDefaultToBusinessFREBooleanYesDefault to OneDrive Business instead of OneDrive Personal.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive DefaultToBusinessFRE -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
79
OneDrive (Mac App Store)com.microsoft.OneDriveDefaultToBusinessFREBooleanYesDefault to OneDrive Business instead of OneDrive Personal.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive DefaultToBusinessFRE -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
80
OneDrive (Standalone)com.microsoft.OneDriveDisableHydrationToastBooleanYesDisable download toasts. Prevents toasts from appearing when applications cause file contents to be downloaded. When set to true, toasts will not appear when applications trigger the download of file contents.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
81
OneDrive (Mac App Store)com.microsoft.OneDriveDisableHydrationToastBooleanYesDisable download toasts. Prevents toasts from appearing when applications cause file contents to be downloaded. When set to true, toasts will not appear when applications trigger the download of file contents.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
82
OneDrive (Standalone)com.microsoft.OneDriveDisablePersonalSyncBooleanYesDisable personal accounts. Blocks users from signing in and syncing files in personal OneDrive accounts. If this key is set after a user has set up sync with a personal account, the user will be signed out.
When set to true, this parameter prevents users from adding or syncing personal accounts. 		defaults write com.microsoft.OneDrive DisablePersonalSync -bool TRUE
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
83
OneDrive (Mac App Store)com.microsoft.OneDriveDisablePersonalSyncBooleanYesDisable personal accounts. Blocks users from signing in and syncing files in personal OneDrive accounts. If this key is set after a user has set up sync with a personal account, the user will be signed out.
When set to true, this parameter prevents users from adding or syncing personal accounts. 		defaults write com.microsoft.OneDrive DisablePersonalSync -bool TRUE
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
84
OneDrive (Standalone)com.microsoft.OneDriveDownloadBandwidthLimitedIntegerYesSet maximum download throughput. Sets the maximum download throughput rate in kilobytes (KB)/sec for computers running the OneDrive sync client. This parameter determines the download throughput in KB/sec that the sync client can use. The minimum rate is 50 KB/sec and the maximum rate is 100,000 KB/sec.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
85
OneDrive (Mac App Store)com.microsoft.OneDriveDownloadBandwidthLimitedIntegerYesSet maximum download throughput. Sets the maximum download throughput rate in kilobytes (KB)/sec for computers running the OneDrive sync client. This parameter determines the download throughput in KB/sec that the sync client can use. The minimum rate is 50 KB/sec and the maximum rate is 100,000 KB/sec.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
86
OneDrive (Standalone)com.microsoft.OneDriveEnableAddAccountsBooleanYesAllow users to add accounts to OneDrive.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive EnableAddAccounts -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
87
OneDrive (Mac App Store)com.microsoft.OneDriveEnableAddAccountsBooleanYesAllow users to add accounts to OneDrive.

This key might be deprecated as it no longer shows up in the documentation.		defaults write com.microsoft.OneDrive EnableAddAccounts -bool TRUE
https://support.office.com/en-us/article/Get-started-with-the-new-OneDrive-sync-client-on-Mac-OS-X-d11b9f29-00bb-4172-be39-997da46f913f?ui=en-US&rs=en-US&ad=US
88
OneDrive (Standalone)com.microsoft.OneDriveFilesOnDemandEnabledBooleanYesEnable Files On-Demand. Specifies whether Files On-Demand is enabled. If you don't set this setting, Files On-Demand will be enabled automatically as we roll out the feature, and users can turn the setting on or off. When set to true, new users who set up the sync client will download online-only files by default. When set to false, Files On-Demand will be disabled and users won't be able to turn it on.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
89
OneDrive (Mac App Store)com.microsoft.OneDriveFilesOnDemandEnabledBooleanYesEnable Files On-Demand. Specifies whether Files On-Demand is enabled. If you don't set this setting, Files On-Demand will be enabled automatically as we roll out the feature, and users can turn the setting on or off. When set to true, new users who set up the sync client will download online-only files by default. When set to false, Files On-Demand will be disabled and users won't be able to turn it on.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
90
OneDrive (Standalone)com.microsoft.OneDriveHideDockIconBooleanYesDock icon. Specifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. defaults write com.microsoft.OneDrive HideDockIcon -bool TRUE
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
91
OneDrive (Mac App Store)com.microsoft.OneDriveHideDockIconBooleanYesDock icon. Specifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running. defaults write com.microsoft.OneDrive HideDockIcon -bool TRUE
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
92
OneDrive (Standalone)com.microsoft.OneDriveHydrationDisallowedAppsStringYesBlock apps from downloading online-only files. Prevents applications from automatically downloading online-only files. You can use this setting to lock down applications that don't work correctly with your deployment of Files On-Demand.
Json in the following format:

[{"ApplicationId":"appId","MaxBundleVersion":"1.1","MaxBuildVersion":"1.0"}]

"AppID" can be either the BSD process name or the bundle display name. MaxBuildVersion denotes the maximum build version of the application that will be blocked. MaxBundleVersion denotes the maximum bundle version of the application that will be blocked.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
93
OneDrive (Mac App Store)com.microsoft.OneDriveHydrationDisallowedAppsStringYesBlock apps from downloading online-only files. Prevents applications from automatically downloading online-only files. You can use this setting to lock down applications that don't work correctly with your deployment of Files On-Demand.
Json in the following format:

[{"ApplicationId":"appId","MaxBundleVersion":"1.1","MaxBuildVersion":"1.0"}]

"AppID" can be either the BSD process name or the bundle display name. MaxBuildVersion denotes the maximum build version of the application that will be blocked. MaxBundleVersion denotes the maximum bundle version of the application that will be blocked.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
94
OneDrive (Standalone)com.microsoft.OneDriveIsBusinessProvisionedBooleanYes
DEPRECATED
https://macadmins.slack.com/archives/C1HNS6CTB/p1497298573587335
defaults write com.microsoft.OneDrive IsBusinessProvisioned -bool TRUE
95
OneDrive (Mac App Store)com.microsoft.OneDriveIsBusinessProvisionedBooleanYes
DEPRECATED
https://macadmins.slack.com/archives/C1HNS6CTB/p1497298573587335
defaults write com.microsoft.OneDrive IsBusinessProvisioned -bool TRUE
96
OneDrive (Standalone)com.microsoft.OneDriveOpenAtLoginBooleanYesSpecifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
97
OneDrive (Mac App Store)com.microsoft.OneDriveOpenAtLoginBooleanYesSpecifies whether a dock icon for OneDrive is shown. When set to true, this parameter hides the OneDrive dock icon even when the application is running.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
98
OneDrive (Standalone)com.microsoft.OneDriveSharePointOnPremFrontDoorUrlStringYesSharePoint Server Front Door URL. Specifies the SharePoint Server 2019 on-premises URL that the OneDrive sync client should try to authenticate and sync against. The URL of the on-premises SharePoint Server.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
99
OneDrive (Mac App Store)com.microsoft.OneDriveSharePointOnPremFrontDoorUrlStringYesSharePoint Server Front Door URL. Specifies the SharePoint Server 2019 on-premises URL that the OneDrive sync client should try to authenticate and sync against. The URL of the on-premises SharePoint Server.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos
100
OneDrive (Standalone)com.microsoft.OneDriveSharePointOnPremPrioritizationPolicyIntegerYesSharePoint OnPrem Prioritization. For hybrid scenarios where the email is the same for both SharePoint Server on-premises and SharePoint Online, determines whether or not the client should set up sync for SharePoint Server or SharePoint Online first during the first-run scenario. This parameter determines which service to attempt to authenticate against for setting up sync.

1 indicates OneDrive should setup SharePoint Server on-premises first, followed by SharePoint Online.
https://docs.microsoft.com/en-us/onedrive/deploy-and-configure-on-macos