By making changes to the Current User branch in the Registry, it is possible to change the load behavior of the Savance Workplace Outlook Interface. This gives administrators the ability to deploy the Savance Workplace Outlook Interface on a terminal server, but only have it available to certain users, even with all users continuing to have full access to Outlook.
To enable the Savance Workplace Outlook Interface, create a new Registry file called something like “SavanceWorkplaceOutlookLoadEnabled.reg”. Edit the file and copy and paste the following code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Savance.Savance Workplace Outlook Add-in]
“LoadBehavior”=dword:00000003
[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Savance.Savance Workplace Outlook Add-in Ext]
“LoadBehavior”=dword:00000003
To disable the Savance Workplace Outlook Interface, create a new Registry file called something like “SavanceWorkplaceOutlookLoadDisabled.reg”. Edit the file and copy and paste the following code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Savance.Savance Workplace Outlook Add-in]
“LoadBehavior”=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Savance.Savance Workplace Outlook Add-in Ext]
“LoadBehavior”=dword:00000002
Once you have made these scripts, you just need to push out the appropriate registry file to your user groups, either with a login script, or with a Group Policy. You may need to place these registry keys under HKEY_LOCAL_MACHINE instead. You can create a security group called Savance Workplace and add the users who should have access to the add-in. You then can create a pair of registry keys in Group Policy Management Editor under User Configuration -> Preferences -> Windows Settings -> Registry. The key with LoadBehavior = 3 would need a rule to apply it for all users in the Savance Workplace security group. The other key with LoadBehavior = 2 would need a rule to apply it for all users not in the Savance Workplace security group. Here is a screenshot of how this would be set up:
*** Additional Option Using File Level Security ***
A customer has brought to our attention that there is an additional method that can be used to limit access to the Add-in on a shared PC like terminal or citrix server. What you can do is limit file-level security access to the “EIOBoard Outlook Addin.dll.manifest” found in the “C:\Program Files (x86)\Savance\Savance Workplace Outlook Add-in” folder. This will cause the add-in to fail to load but Outlook does not give any specific error, thus preventing those users from running the add-in. If the main add-in for Savance Workplace doesn’t load, the Ext (which is the 2007 ribbon in the appointment screen) will not load either thus preventing all portions of the add-in from running.