Solved

Is there anyway to block Outlook Web Access internally?

Posted on 2008-10-29
10
775 Views
Last Modified: 2012-05-05
We have user's that are using outlook web access internally and we do not want them to. We have a link to OWA via our external website. We want user's to be able to use this link when they are not in the building. We currently use iprism for our internet filtering but haven't found a way to block this.
0
Comment
Question by:abahr
  • 5
  • 3
  • 2
10 Comments
 
LVL 2

Expert Comment

by:calepantke
ID: 22833184
You can use IE's content advisor to block the webmail site on his PC. 
http://www.wikihow.com/Block-a-Website-in-Internet-Explorer-7
0
 

Author Comment

by:abahr
ID: 22833223
Great idea. Is there any way to do this easily for all of our PC's without touching each one? We also are not on IE7, but we can always upgrade to it.
0
 
LVL 2

Accepted Solution

by:
calepantke earned 500 total points
ID: 22833284
Yes you can. Implement the content advisor through group policy if you are running active directory. 
You can find it under User Config/Windows Settings/Internet Explorer Maintenance/Security/Security Zones and Content Ratings and modify the Content Ratings there. 
A little more information can be found here.
http://www.experts-exchange.com/Security/Misc/Q_21226658.html
0
Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

 
LVL 2

Expert Comment

by:calepantke
ID: 22833441
I decided to test this... and if you have a webmail site like mail.mydomain.com then if someone tries to go to www.mydomain.com they will get blocked. 
If you don't want this, another way to do it is to add a fake route for the webmail IP on every machine. You can do this through GPO.
http://www.experts-exchange.com/Security/Software_Firewalls/Q_22777039.html
Or you could try out using Windows Firewall to block the IP. 
0
 
LVL 2

Expert Comment

by:calepantke
ID: 22833571
"I decided to test this... and if you have a webmail site like mail.mydomain.com then if someone tries to go to www.mydomain.com they will get blocked."

My mistake... I didn't check the "Users can see websites that have no ratings". This works well. Sorry for the confusion!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22868554
Actually, it's much easier than that.

In IIS, just block your internal IP addresses from the \Exchange virtual directory.

Right click the Exchange virtual directory and select properties > Directory Security Tab.

Click the Edit... button under IP address and domain name restrictions.

Leave the "Granted access" selected, and then Add.. whatever IP address range you like to restrict access.

Jeff
TechSoEasy


image.png
image2.png
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22868600
You can also exclude your EXTERNAL IP address as well if they are going out and back in to access OWA.

Jeff
TechSoEasy
0
 
LVL 2

Expert Comment

by:calepantke
ID: 22869373
Which you could do the same with a bad route as well which I listed above.
It depends which method is easier for the environment you are in. Sometimes you have certain Computers, other times it's certain Users, or maybe certain IP address ranges. 
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22869716
The "bad route" solution still requires configuration at the workstation level (either directly or through group policy).  The suggestion I made is done at the server level.  These are very different methods.

Jeff
TechSoEasy
0
 

Author Closing Comment

by:abahr
ID: 31511264
Thanks for your help!
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article will describe some of the best ways to process an ex-employee from an Office 365 subscription. I will describe the methods I would recommend when the data needs to be kept for the ex-employee as well as how to manage any new email as we…
Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now