Email profile settings for devices running Windows 10/11 in Microsoft Intune


Intune may support more settings than the settings listed in this article. Not all settings are documented, and won’t be documented. To see the settings you can configure, create a device configuration profile, and select Settings Catalog. For more information, see Settings catalog.

In Microsoft Intune, you can create and configure email to connect to an Exchange email server, choose how users authenticate, use S/MIME for encryption, and more. The email profile uses the native or built-in email app on the device, and allows users to connect to their organization email.

This feature applies to:

  • Windows 11
  • Windows 10

This article describes some of the settings you can configure. You can create a device configuration profile to push or deploy these email settings to your iOS/iPadOS devices.

Before you begin

Create a Windows 10/11 Email device configuration profile.

Email settings

  • Email server: Enter the host name of your Exchange server. For example, enter

  • Account name: Enter the display name for the email account. This name is shown to users on their devices.

  • Username attribute from AAD: This name is the attribute Intune gets from Azure Active Directory (AAD). Intune dynamically generates the username that's used by this profile. Your options:

    • User Principal Name: Gets the name, such as user1 or
    • Primary SMTP address: Gets the name in email address format, such as
    • sAM Account Name: Requires the domain, such as domain\user1. Also enter:
      • User domain name source: Select AAD (Azure Active Directory) or Custom.

        When getting the attributes from AAD, also enter:

        • User domain name attribute from AAD: Choose to get the Full domain name or the NetBIOS name attribute of the user.

        When using Custom attributes, also enter:

        • Custom domain name to use: Enter a value that Intune uses for the domain name, such as or contoso.
  • Email address attribute from AAD: Intune gets this attribute from Azure Active Directory (AAD). Choose how the email address for the user is generated. Make sure your users have email addresses that match the attribute you select. Your options:

    • User principal name: Uses the full principal name as the email address, such as or user1.
    • Primary SMTP address: Uses the primary SMTP address to sign in to Exchange, such as


  • SSL: Enable uses Secure Sockets Layer (SSL) communication when sending emails, receiving emails, and communicating with the Exchange server. Disable doesn't require SSL.


  • Amount of email to synchronize: Select the number of days of email that you want to synchronize. When set to Not configured (default), Intune doesn't change or update this setting. Select Unlimited to synchronize all available email.

  • Sync schedule: Select the schedule for devices to synchronize data from the Exchange server. You can also select As Messages arrive, which synchronizes data as soon as it arrives. Or, select Manual so the device user starts the synchronization.

    When set to Not configured (default), Intune doesn't change or update this setting.

Content sync

  • Content type to sync: Select the content types that you want to synchronize to devices. Your options:
    • Contacts: On syncs the contacts. Off doesn't automatically sync the contacts. Users manually sync.
    • Calendar: On syncs the calendar. Off doesn't automatically sync the contacts. Users manually sync.
    • Tasks: On syncs the tasks. Off doesn't automatically sync the tasks. Users manually sync.

Next steps

You can also configure the email settings on Android, Android Enterprise, and iOS/iPadOS.

Learn more about the email settings in Intune.

Assign the profile, and monitor its status.