How to Allow or Deny OS and Apps Access to Email in Windows 10


Windows 10 provides a wealth of data access to make apps useful and valuable to you. These capabilities, which are security constructs that gate access to personal data, include things like Calendar, Contacts, Call History, and more. Each capability has its own privacy settings page so that you can control it and what apps and services can use that capability.

Starting in Windows 10 Insider Preview build 10547, you can turn on or off to let apps access and send email, and also choose individual apps that can access and send email.

Starting with Windows 10 build 17063, you can now allow or deny Windows 10 and apps access to email on your device (PC) for all users.

If you allow access, users on your PC will be able to turn on or off if their apps have access to their email. If you turn on to let apps access your email, you can choose to turn on (allow) or off (deny) access for individual apps.

This tutorial will show you how to change Privacy settings to allow or deny Windows and apps access to email for all users or only your account in Windows 10.


 CONTENTS:

  • Option One: Allow or Deny Windows and Apps Access to Email for All Users in Settings
  • Option Two: Allow or Deny Windows and Apps Access to Email for All Users using a REG file
  • Option Three: Turn On or Off Let Apps Access Your Email in Settings
  • Option Four: Turn On or Off Let Apps Access Your Email using a REG file
  • Option Five: Turn On or Off Let Specific Apps Access Email Info in Settings
  • Option Six: Enable or Disable Let Windows Apps Access Email for All Accounts in Local Group Policy Editor
  • Option Seven: Enable or Disable Let Windows Apps Access Email for All Accounts using a REG file





Allow or Deny OS and Apps Access to Email in Windows 10 OPTION ONE Allow or Deny OS and Apps Access to Email in Windows 10
Allow or Deny Windows and Apps Access to Email for All Users in Settings


This option is only available starting with Windows 10 build 17063.

You must be signed in as an administrator to be able to do this option.

1. Open Settings, and click/tap on the Privacy icon.

2. Click/tap on Email on the left side, click/tap on the Change button on the right side, and turn On (default) or Off Email access for this device for what you want. (see screenshots below)

Name:  Email_access_for_device-1.jpg
Views: 808
Size:  111.3 KB Name:  Email_access_for_device-2.jpg
Views: 796
Size:  109.2 KB






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION TWO Allow or Deny OS and Apps Access to Email in Windows 10
Allow or Deny Windows and Apps Access to Email for All Users using a REG file


This option is only available starting with Windows 10 build 17063.

You must be signed in as an administrator to be able to do this option.

The downloadable .reg files below will modify the string value in the registry key below.

Code:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email

Value string value

Deny = Off
Allow = On


1. Do step 2 (on) or step 3 (off) below for what you would like to do.


 2. To Turn On Allow Windows and Apps Access to Email for All Users

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_ON_Windows_and_apps_acecss_to_email_for_device.reg

download


 3. To Turn Off Allow Windows and Apps Access to Email for All Users

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_OFF_Windows_and_apps_acecss_to_email_for_device.reg

download

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. You can now delete the downloaded .reg file if you like.






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION THREE Allow or Deny OS and Apps Access to Email in Windows 10
Turn On or Off Let Apps Access Your Email in Settings


The setting in this option will be grayed out unless Email access for this device is turned on from Option One or Option Two above.

1. Open Settings, and click/tap on the Privacy icon.

2. Click/tap on Email on the left side, and turn On (default) or Off Let apps access your email on the right side for what you want. (see screenshots below)

Name:  Email_access_for_apps-1.jpg
Views: 760
Size:  84.8 KB Name:  Email_access_for_apps-2.jpg
Views: 756
Size:  80.2 KB






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION FOUR Allow or Deny OS and Apps Access to Email in Windows 10
Turn On or Off Let Apps Access Your Email using a REG file


This option will not get applied until Email access for this device is turned on from Option One or Option Two above.

The downloadable .reg files below will modify the string value in the registry key below.
Code:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email

Value string value

Deny = Off
Allow = On


1. Do step 2 (on) or step 3 (off) below for what you would like to do.


 2. To Turn On Let Apps Access Your Email

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_ON_apps_access_to_email_for_current_account.reg

download


 3. To Turn Off Let Apps Access Your Email

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_OFF_apps_access_to_email_for_current_account.reg

download

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. You can now delete the downloaded .reg file if you like.






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION FIVE Allow or Deny OS and Apps Access to Email in Windows 10
Turn On or Off Let Specific Apps Access Your Email in Settings


The settings in this option will be grayed out unless Let apps access your email is turned on from Option Three or Option Four above.

The settings for this option are stored in the subkeys in the registry key below. Each subkey represents a listed app.

Code:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email
Name:  Choose_apps_that_can_access_your_email_registry.jpg
Views: 718
Size:  36.4 KB

1. Open Settings, and click/tap on the Privacy icon.

2. Click/tap on Email on the left side, turn On or Off apps you want under Choose apps that can access your email on the right side. (see screenshot below)

Note that each legacy app will not appear individually in the list like Store apps do, but they will respect the toggle starting with Windows 10 build 17063.

Name:  Email_access_for_specific_apps.jpg
Views: 712
Size:  87.6 KB






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION SIX Allow or Deny OS and Apps Access to Email in Windows 10
Enable or Disable Let Windows Apps Access Calendar for All Accounts in Local Group Policy Editor


You must be signed in as an administrator to be able to do this option.

This option will override Option One and Option Two above.

Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions. All editions can use Option Seven below to do this using a .reg file instead though.

1. Open the Local Group Policy Editor.

2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

Computer Configuration\Administrative Templates\Windows Components\App Privacy

Name:  Email_access_for_apps_gpedit-1.jpg
Views: 703
Size:  107.4 KB

3. In the right pane of App Privacy in Local Group Policy Editor, double click/tap on the Let Windows apps access email policy to edit it. (see screenshot above)

4. Do step 5 (enable) or step 6 (disable) below for what you would like to do.


 5. To Enable Let Windows Apps Access Email for All Accounts

This is the default setting.

A) Select (dot) Not Configured, click/tap on OK, and go to step 7 below. (see screenshot below)


 6. To Disable Let Windows Apps Access Email for All Accounts

A) Select (dot) Enabled, select Force Deny in the "Default for all apps" drop menu under Options, click/tap on OK, and go to step 7 below. (see screenshot below)

Name:  Email_access_for_apps_gpedit-2.jpg
Views: 790
Size:  108.6 KB

7. When finished, you can close the Local Group Policy Editor if you like.






Allow or Deny OS and Apps Access to Email in Windows 10 OPTION SEVEN Allow or Deny OS and Apps Access to Email in Windows 10
Enable or Disable Let Windows Apps Access Email for All Accounts using a REG file


You must be signed in as an administrator to be able to do this option.

Setting this option to disable will gray out and override Option One and Option Two above.

The downloadable .reg files below will add and modify the DWORD and hex values in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy

LetAppsAccessEmail DWORD value

(delete) = Enable
2 = Disable

LetAppsAccessEmail_UserInControlOfTheseApps hex value
LetAppsAccessEmail_ForceAllowTheseApps hex value
LetAppsAccessEmail_ForceDenyTheseApps hex value

(delete) = Enable
hex(7):00,00 = Disable


1. Do step 2 (on) or step 3 (off) below for what you would like to do.


 2. To Enable Let Windows Apps Access Email for All Accounts

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_Let_apps_access_email.reg

download


 3. To Disable Let Windows Apps Access Email for All Accounts

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_Let_apps_access_email.reg

download

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. You can now delete the downloaded .reg file if you like.


That's it,
Shawn