From the research I've done, I've gathered that the answer is natively "No" but I thought I'd poke around here for some ideas. We are in a situation where we must allow users to use Active Sync but we need to disable Outlook Anywhere altogether
(per user ideally but globally is okay as well). The reason is that our company is passing policy that email is to be accessed only from company issued and approved devices. The problem with the way that Microsoft changed the connectivity of Outlook in 2013
is that it ONLY connects over RPC/HTTP so the old commands to disable RPC/HTTP seem to break email access for the user. We can't block on the firewall because everything comes in through port 443 so it seems like it needs to be something that is disabled as
a feature on the user account but that no longer seems possible as of Exchange 2013. I've read that some people suggest some DNS workarounds but it seems like that might interfere with other desired behaviors such as auto discover (and users could also work
around the issue by manually typing in the name of the server). This leaves a bit of a hole for our email access as someone could use their own copy of Outlook to connect from a personal device. Has anyone else managed to come up with an acceptable workaround
for this scenario? Any advice is appreciated. Thank you in advance for your time!
↧