Restrict Outlook Web Access Based On Hours

zito2000 used Ask the Experts™
Active Directory
Exchange 2013 on prem

The goal is:
I would like to restrict certain users from logging into OWA during certain off hours.  Is there a way to do this?

In Active Directory, there is a "Logon Hours" section within every users.  If I restrict login hours, does that apply to Outlook Web Access as well?

Thank you!
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
David FavorFractional CTO
Distinguished Expert 2018

One simple approach will be to just setup a firewall rule for your server.

1) Run a command on the clock to block all access to your server ports at one point in time.

2) Run a command on the clock to delete firewall rule(s) added in #1 at another point in time.
EE Topic Advisor, Independant Technology Professional
Yes, Outlook web access still uses AD. So if logon hours are restricted they won't be able to get on.

David's idea would be good to implement as well, better to stop them from even getting to the server if you can.
Shreedhar EtteTechnical Manager
Top Expert 2010

Yes, Active Directory Login Hours will apply to OWA as well.
David FavorFractional CTO
Distinguished Expert 2018

Brian + Shreedhar bring up using Active Directory too.

Whether you use AD or firewall rules will both work.

Using Firewall rules will work independent of any AD problems or maintenance.

Likely using AD will be easier + firewall rules will be a bit more brutal/terse... no indication of why connecting can't occur...
zito2000Network Manager


Thanks All!

Just tested this and it worked perfectly.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial