Anavem
Languagefr
How to Configure Outlook Auto-Login using Microsoft Intune Settings Catalog

How to Configure Outlook Auto-Login using Microsoft Intune Settings Catalog

Automate Outlook email profile setup on Windows 10/11 devices via Microsoft Intune Settings Catalog. Configures Outlook auto-login using Active Directory primary SMTP addresses — eliminates manual profile creation and IT support tickets.

Evan MaelEvan Mael
March 19, 2026 15 min
mediumintune 8 steps 15 min

Overview

Microsoft Intune's Settings Catalog enables automatic Outlook email profile configuration on managed Windows 10/11 devices, using the user's Active Directory primary SMTP address. This eliminates manual profile creation, reduces IT support tickets, and ensures all users have a consistent Outlook experience from first login.

This guide covers the end-to-end Intune configuration: creating a Settings Catalog profile for Microsoft Outlook, configuring the auto-account creation setting, assigning to Entra ID groups, and verifying successful profile deployment via Outlook and Intune device status.

Requirements: Microsoft Intune license, Windows 10/11 devices enrolled in Intune, Microsoft 365 mailboxes with Exchange Online, devices joined to Azure AD/Entra ID.
Implementation Guide

Full Procedure

01

Access Microsoft Intune Admin Center

Open your web browser and navigate to the Microsoft Intune Admin Center. Sign in with your administrator credentials that have Intune management permissions.

Navigate to: https://endpoint.microsoft.com

Once logged in, you'll see the main Intune dashboard. This is your central hub for managing all device configurations and policies.

Pro tip: Use an InPrivate or Incognito browser session to avoid cached credentials if you manage multiple tenants.

Verification: Confirm you can see the main Intune navigation menu on the left side with options like Devices, Apps, and Users.

02

Create a New Configuration Profile

Navigate to the configuration profiles section where you'll create the Outlook auto-login policy.

Go to: Devices > Windows > Configuration profiles

Click Create > New policy

Configure the following settings:

  • Platform: Windows 10 and later
  • Profile type: Settings catalog

Click Create to proceed to the next step.

Verification: You should now see the profile creation wizard with fields for Name and Description.

03

Configure Profile Basic Information

Set up the basic information for your Outlook auto-login configuration profile.

Fill in the following details:

  • Name: Outlook Auto-Login Configuration
  • Description: Automatically configures Outlook profiles using Active Directory primary SMTP address

Click Next to proceed to the configuration settings.

Pro tip: Use descriptive names that clearly indicate the policy's purpose. This helps with management when you have multiple policies.

Verification: The Next button should be enabled, and you should see "Configuration settings" as the next step in the wizard.

04

Add Outlook Auto-Login Settings

Now you'll configure the specific setting that enables automatic Outlook profile configuration.

Click Add settings to open the settings picker.

In the search box, type: automatically configure profile

Navigate through the hierarchy:

  1. Expand Microsoft Outlook 2016
  2. Expand Account Settings
  3. Expand Exchange
  4. Select "Automatically configure profile based on Active Directory primary SMTP address (User)"

Set the value to Enabled

Close the settings picker and click Next.

Warning: Make sure you select the "User" version of this setting, not the "Device" version. The User setting ensures it applies per user login.

Verification: You should see the setting listed in your configuration with the value "Enabled" and the full setting path visible.

05

Configure Scope Tags (Optional)

Scope tags help you filter and manage policies in large organizations. For most deployments, you can skip this step.

If you need to assign scope tags:

  • Click Select scope tags
  • Choose the appropriate tags for your organization
  • Click Select

If you don't need scope tags, simply click Next to continue.

Verification: The wizard should advance to the "Assignments" section.

06

Assign the Policy to Target Groups

Configure which users or devices will receive this Outlook auto-login configuration.

Under Included groups, click Add groups

Select your target Entra ID security groups. For initial testing, choose a small pilot group:

  • Search for your test group (e.g., "Pilot Users" or "IT Department")
  • Select the group(s)
  • Click Select

Click Next to proceed to the final review.

Pro tip: Always test with a small group first. Create a dedicated "Outlook Auto-Login Pilot" security group with 5-10 users for initial validation.

Verification: Your selected groups should appear in the "Included groups" section with the correct member count displayed.

07

Review and Create the Policy

Review all your configuration settings before creating the policy.

Verify the following details:

  • Name: Outlook Auto-Login Configuration
  • Platform: Windows 10 and later
  • Profile type: Settings catalog
  • Setting: Automatically configure profile based on Active Directory primary SMTP address (User) = Enabled
  • Assigned groups: Your selected pilot group

If everything looks correct, click Create.

Verification: You should see a success message, and the policy should appear in your Configuration profiles list with a status of "Not assigned" initially, then "Pending" as it deploys.

08

Monitor Policy Deployment and Verify Configuration

Monitor the policy deployment and verify it's working correctly on target devices.

Check Policy Status:

  1. Go to Devices > Windows > Configuration profiles
  2. Click on your "Outlook Auto-Login Configuration" policy
  3. Review the Device status and User status tabs

Device-Level Verification:

On a target device, check the Event Viewer:

eventvwr.msc

Navigate to: Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin

Look for Event ID 814 indicating successful policy application.

User Experience Verification:

  1. Have a test user sign into a target device
  2. Launch Microsoft Outlook
  3. Outlook should automatically configure using their primary SMTP address
  4. No manual profile setup should be required
Warning: The auto-configuration only works for users without existing Outlook profiles. Test on clean devices or users who haven't configured Outlook previously.

Verification: Policy status should show "Succeeded" for target devices, and test users should be able to access their email immediately after launching Outlook.

Frequently Asked Questions

Does Outlook auto-login work with all versions of Microsoft Outlook?+
The auto-login configuration works with Microsoft Outlook 2016, 2019, 2021, and Microsoft 365 Apps versions. It requires Windows 10 version 1903 or later, or Windows 11. Older versions of Outlook or Windows don't support this Settings Catalog configuration method.
What happens if a user already has an Outlook profile configured?+
The auto-login setting only works for users without existing Outlook profiles. If a user already has a configured profile, Outlook will continue using the existing configuration. For migration scenarios, you'll need to remove existing profiles or use additional policies to manage profile transitions.
How long does it take for the Outlook auto-login policy to apply to devices?+
Intune policies typically apply within 8 hours during regular device check-ins. However, you can force immediate application by syncing devices manually through the Intune portal or by restarting the target devices. The policy takes effect the next time a user launches Outlook after the policy is applied.
Can I use Outlook auto-login with on-premises Exchange servers?+
This specific Settings Catalog configuration is designed for Microsoft 365 and Exchange Online environments. For on-premises Exchange servers, you'll need different configuration methods such as Autodiscover settings or custom OMA-URI policies. The primary SMTP address must be properly configured in your synced Active Directory environment.
What should I do if the Outlook auto-login policy shows as failed in Intune?+
Check the device compliance status, verify the user has proper licensing, and ensure the primary SMTP address is correctly configured in Active Directory. Review the device's Event Viewer for specific error codes, check for conflicting policies, and verify that Outlook version meets requirements. Test with a clean user profile if necessary.
Evan Mael
Written by

Evan Mael

Microsoft MCSA-certified Cloud Architect | Fortinet-focused. I modernize cloud, hybrid & on-prem infrastructure for reliability, security, performance and cost control - sharing field-tested ops & troubleshooting.

Discussion

Share your thoughts and insights

Sign in to join the discussion