Outlook anywhere - Restricting Personal laptops and devices
Hello Experts,
My requirement is to restrict Outlook anywhere(OA) from Personal PC's. we have Exchange 2010 SP3. As of now we haven'r published the OA to internet.
Questions:
1. How to we restrict (by native or any Third party solution) personal PC's or any other devices.
2. If we can restrict only to Domain joined PC's, how we can achieve it?
Any suggestions are appreciated
My requirement is to restrict Outlook anywhere(OA) from Personal PC's. we have Exchange 2010 SP3. As of now we haven'r published the OA to internet.
Questions:
1. How to we restrict (by native or any Third party solution) personal PC's or any other devices.
2. If we can restrict only to Domain joined PC's, how we can achieve it?
Any suggestions are appreciated
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You don't mention your versions.
You should look at the ADFS / WAP / Device Registration / Workplace join solution included in Server 2012R2.
This allows you to identify devices, and tailor access based on multiple factors.
This article explains how it works for Office365, but it is the same principal for your own domain
https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx
Here is one on how to restrict to an OU
http://stackoverflow.com/questions/15352332/restricting-adfs-2-0-to-use-a-specific-ou-instead-of-domain-level-access
These use ADFS 2.0, It is all easier with ADFS 3.0
You should look at the ADFS / WAP / Device Registration / Workplace join solution included in Server 2012R2.
This allows you to identify devices, and tailor access based on multiple factors.
This article explains how it works for Office365, but it is the same principal for your own domain
https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx
Here is one on how to restrict to an OU
http://stackoverflow.com/questions/15352332/restricting-adfs-2-0-to-use-a-specific-ou-instead-of-domain-level-access
These use ADFS 2.0, It is all easier with ADFS 3.0
Thank you for the valuable suggestions.
Windows 2008 R2. Exchange version as 2010 SP3 RU7 Enterprise. All are multi role servers.
Windows 2008 R2. Exchange version as 2010 SP3 RU7 Enterprise. All are multi role servers.
You should be OK with that.
https://en.wikipedia.org/wiki/Active_Directory_Federation_Services
But you should look for a Microsoft partner to help you, it will save you a lot of time.
https://en.wikipedia.org/wiki/Active_Directory_Federation_Services
But you should look for a Microsoft partner to help you, it will save you a lot of time.
Premium Content
You need an Expert Office subscription to comment.Start Free Trial