Fix Teams App Is Blocked by Organization Policy on Teams for the Web

When you open Teams for the web, you may see an error that says the Teams app is blocked by an organization policy. This message appears when your IT admin has applied a policy that prevents the desktop app from running, but the web version is still allowed. The block is often caused by a Teams app permission policy or a setup policy that hides or disables the desktop client. This article explains why the block happens and shows you how to fix it from the Teams admin center.

Why Teams for the Web Shows the Blocked by Organization Policy Error

The error message appears when the Teams desktop app is blocked by a policy that your organization has set. This policy is usually an app permission policy or an app setup policy. These policies control which apps appear in the Teams app bar and which apps users are allowed to install. If the desktop app is not allowed or is hidden, Teams for the web may still load, but the app itself is treated as blocked.

The block is not a network issue or a sign-in problem. It is a configuration issue in the Teams admin center. The admin can change the policy to allow the desktop app, or you can use the web version as a workaround. However, if your organization intentionally blocks the desktop app for security reasons, you may not be able to fix it yourself. In that case, contact your IT department.

What the Error Message Actually Means

The exact wording varies, but the message typically says: “This app is blocked by your organization policy.” This is a generic message that appears when a policy denies access to a specific app. For Teams, this can happen if the admin has set the app to “Blocked” in the tenant app catalog, or if the permission policy assigned to you does not include the Teams app.

Who Can Fix This Issue

Only a Teams administrator can change policies that block the desktop app. If you are a regular user, you cannot override this policy. The steps below are written for admins who need to unblock the app. If you are not an admin, share this article with your IT team.

Steps to Unblock the Teams Desktop App from the Admin Center

Follow these steps in order. You need the Teams administrator role to complete them.

1. Sign in to the Teams admin center
   Go to admin.teams.microsoft.com and sign in with an account that has the Teams administrator role.
2. Open the Manage apps page
   In the left navigation, select Teams apps, then select Manage apps. Search for “Microsoft Teams” in the search box.
3. Check the app status
   Look at the Status column for the Microsoft Teams app. If it says “Blocked,” select the app name, then select Allow in the app details pane. If it says “Allowed,” move to the next step.
4. Review the permission policies
   In the left navigation, select Teams apps, then select Permission policies. Select the policy that applies to the affected users, usually the Global (org-wide default) policy.
5. Edit the permission policy
   In the policy editor, look for the section called Microsoft Apps. Find “Microsoft Teams” and make sure the dropdown is set to Allowed. If it is set to Blocked, change it to Allowed and select Save.
6. Review the setup policies
   In the left navigation, select Teams apps, then select Setup policies. Select the policy assigned to the affected users.
7. Edit the setup policy
   Scroll to the Installed apps section. Make sure “Microsoft Teams” is listed. If it is missing, select Add apps, search for Teams, and add it. Also check the Pinned apps section if you want the desktop app to appear in the app bar. Select Save after changes.
8. Wait for policy propagation
   Policy changes can take up to 24 hours to apply. In most cases they apply within a few hours. Ask the affected user to sign out of Teams for the web and sign back in after the change.

If You Cannot Change the Policy Yourself

If you are not an admin, you cannot unblock the desktop app. Use Teams for the web as a temporary workaround. The web version supports most core features like chat, meetings, and file sharing. To access it, go to teams.microsoft.com and sign in with your work account.

If Teams for the Web Still Shows the Blocked Message

Teams for the web shows the block message after the policy change

The policy change may not have reached the user yet. Wait a few hours and try again. Also ask the user to clear the browser cache or use a private browsing window. If the problem persists, verify that the correct policy is assigned to the user. Use the Policy packs page in the admin center to see which policies are assigned.

The block message appears only on some users

This usually means those users have a custom permission or setup policy applied. Check the Users page in the admin center, select the affected user, and look at the Policies tab. Make sure the assigned policies allow the Teams app.

The desktop app is blocked but the web app works

This is the expected behavior when the admin blocks only the desktop client. To allow the desktop app, follow the steps above and ensure the permission policy allows Microsoft Teams. If the organization intentionally blocks the desktop app for security, you must keep using the web version.

Teams Desktop App vs Teams for the Web: Key Differences

Item	Teams Desktop App	Teams for the Web
Installation	Requires a local installer	No installation needed
Performance	Uses less memory for large meetings	Can be slower on older browsers
Feature support	Full feature set, including advanced meeting controls	Most features, but some admin settings are limited
Policy control	Can be blocked or allowed by admin	Always available if the tenant allows Teams
Best for	Users who need reliable meeting quality	Users on managed devices or temporary access

Now you know how to unblock the Teams desktop app from the admin center. Check the permission and setup policies first, then wait for the changes to apply. If you are not an admin, use Teams for the web at teams.microsoft.com to keep working. For advanced control, create a custom permission policy that allows Teams only for specific users.