Restrict external OWA and autodiscover for Office 365

Member_2_7968778
Member_2_7968778 used Ask the Experts™
on
We have O365 which is just being used to authenticate to Office with ADFS and we have on Exchange 2010 on premises.

We would like Restrict external OWA and autodiscover for Office 365 as we have a scenario where users are downloading O365 on their personal computers outside the office and when they sign in with their O365 account and open Outlook they enter their password and all their work emails are on Outlook.

Is there a way where we can block autodiscover outside network and use all features inside the network? We would like webmail to be still accessible outside. We just need to block the Outlook option outside the network.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Systems Engineer
Top Expert 2016
Commented:
We would like Restrict external OWA and autodiscover for Office 365 as we have a scenario where users are downloading O365 on their personal computers outside the office and when they sign in with their O365 account and open Outlook they enter their password and all their work emails are on Outlook.

Why wouldn't you just disable the ability to download Office 365 ProPlus?


Then you can deploy it to only the machines you want to.


You cannot disable autodiscover. But you can configure AD FS for limited access based on the client location or setting up conditional access.

timgreen7077Exchange Engineer
Distinguished Expert 2018
Commented:
Are you saying that you don't want the users to be able to access emails via outlook? If that is the case, you will still need OWA so that they will access email only via OWA. What about their mobile devices? If you don't want the users to access emails via outlook, I would suggest disabling MAPI connectivity on the users mailbox. By disabling MAPI connectivity the users can still access OWA but if they open outlook then it will not connect to the mailbox. The below link shows show to disable MAPI connectivity via the EAC or Powershell

https://technet.microsoft.com/en-us/library/bb124497(v=exchg.150).aspx
MaheshArchitect
Distinguished Expert 2018

Commented:
Are you using 0365 pro plus or exchange online as well?
Todd NelsonSystems Engineer
Top Expert 2016

Commented:
No responses in 21 days.  Sufficient information provided for solution.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial