I might be not the only one who thought it would be simple to configure default fonts and styles for Outlook, via Intune. There’s no default policy available who can configure this directly from Intune. I had to create a powershell script for this.
Note: When i wrote this blog, Proactive remediation did not exist yet. In the comments, Olivier published his remediation script. If you have the required licenses for Proactive remediation i recommend to take a look at his comment here.
Users can change this setting on their device to anything they want. The company policy states that Outlook should use Arial 10 as the default font and styling. So, i had to figure out how to configure this setting every time over and over again.
I found the Intune Login script method by Nicola Suter (Nicolonsky Tech). This script creates a scheduled task in the endpoint which runs at every logon (in user context). It stores the actual Powershell script in the endpoint in C:\ProgramData\…\. Yes, a very smart user could still modify this file but Intune will overwrite it again so this one should be fine!.
See my script here: scripts/UEM_OutlookBranding.ps1 at main · j0eyv/scripts (github.com)
The magic is happening between rule #77 and #108. This part will be stored in C:\ProgramData\UEM_OutlookBrandingReg.ps1. This script is being executed by a scheduled task named “UEM-OutlookBrandingTasks”.
Open Endpoint Manager via https://endpoint.microsoft.com. Navigate to Devices -> Scripts. Create a new script by clicking “Add“.
Fill in a name. A description is optional.
Select the UEM_OutlookBranding.ps1 script which is available in my Github repo: scripts/UEM_OutlookBranding.ps1 at main · j0eyv/scripts (github.com)
Assign the script to “All users” or a specific Azure AD Group and finish the wizard.
Note: The script is being pushed to the endpoints by Intune. You can speed up this process to logoff and logon again on one of the intune managed devices. The scheduled task will then be created and the powershell script will be stored in the endpoint.
When u see the scheduled task u could logoff and logon again. This is the moment the scheduled task will run for the first time. You should then open Outlook and verify that the font and languages settings are configured with Arial 10.
And yes, this could probably also been done with a OMA-URI (ADMX).