Prevent Office 365 Users from Setting up Outlook E-mail

Rammy Charles
Rammy Charles used Ask the Experts™
on
Would like to know if it is possible to restrict the ability of Office 365 / Exchange 365 users from downloading their entire mailbox through the Outlook client (Office suite of applications) to only a whitelisted IP addresses (for example corporate networks).

Meaning users could only retrieve e-mail from Outlook web via Office 365 or ActiveSync.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2015
Distinguished Expert 2018

Commented:
If you have AD FS in place, you can use claims rules to restrict access to specific addresses only. Otherwise you can disable the MAPI protocol for said users via Set-CasMailbox.
Rammy CharlesSales Engineer

Author

Commented:
No ADFS but would like to restrict MAPI but only to a specific IP (is that possible)? For example, our corporate LANs and whitelist those IPs so that only MAPI connections from there would be allowed.
Most Valuable Expert 2015
Distinguished Expert 2018
Commented:
Not really, Office 365 being a public cloud service is by definition accessible from any location. You can try using Azure MFA as a workaround, as it does offer a whitelist functionality, but that doesnt apply to only Exchange and you will have to use even uglier workarounds after...

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial