Office365 Exchange Online Restrict Access - Revision history

Michael.mast: /* Restrict MAPI */

2019-12-03T21:46:09Z

Restrict MAPI

2019-12-03T21:43:25Z

Restrict MAPI

2019-12-03T21:42:31Z

Restrict MAPI

2019-12-03T21:37:58Z

2018-12-03T12:58:33Z

Restrict OWA access based on client IP

2018-09-28T16:22:11Z

Access to Exchange Onlone

2018-09-28T16:13:23Z

Working with rules

2018-09-28T16:07:06Z

Working with rules

2018-09-28T15:52:55Z

Access to Exchange Onlone

2018-09-28T15:51:12Z

Restrict OWA access based on client IP

@@ Line 155: / Line 155: @@
 ==Restrict MAPI==
-This was needed to prevent users from accessing MAPI remotely with Outlook installed on personal devices.
+This was needed to prevent users from accessing MAPI remotely with Outlook installed on personal devices.<br>
 <pre>
 new-clientaccessrule -name OutlookAnywhere-Default -Action Allow -AnyOfProtocols OutlookAnywhere -AnyOfClientIPAddressesOrRanges xxx.xxx.xxx.xxx/xx -priority 10 -enabled $false

@@ Line 157: / Line 157: @@
 This was needed to prevent users from accessing MAPI remotely with Outlook installed on personal devices.
 <pre>
-new-clientaccessrule -name OutlookAnywhere-Deny -Action Allow -AnyOfProtocols OutlookAnywhere -AnyOfClientIPAddressesOrRanges xxx.xxx.xxx.xxx/xx -priority 10 -enabled $false
+new-clientaccessrule -name OutlookAnywhere-Default -Action Allow -AnyOfProtocols OutlookAnywhere -AnyOfClientIPAddressesOrRanges xxx.xxx.xxx.xxx/xx -priority 10 -enabled $false
 new-clientaccessrule -name OutlookAnywhere-Exceptions -Action Allow -AnyOfProtocols OutlookAnywhere -UsernameMatchesAnyOfPatterns *michael.mast* -priority 11 -enabled $false
 new-clientaccessrule -name OutlookAnyhwere-Deny -Action DenyAccess -AnyOfProtocols OutlookAnywhere -priority 12 -enabled $false

@@ Line 157: / Line 157: @@
 This was needed to prevent users from accessing MAPI remotely with Outlook installed on personal devices.
 <pre>
-new-clientaccessrule -name OutlookAnywhere-Deny -Action Allow -AnyOfProtocols OutlookAnywhere -AnyOfClientIPAddressesOrRanges xxx.xxx.xxx.xxx\xx -priority 10 -enabled $false
+new-clientaccessrule -name OutlookAnywhere-Deny -Action Allow -AnyOfProtocols OutlookAnywhere -AnyOfClientIPAddressesOrRanges xxx.xxx.xxx.xxx/xx -priority 10 -enabled $false
 new-clientaccessrule -name OutlookAnywhere-Exceptions -Action Allow -AnyOfProtocols OutlookAnywhere -UsernameMatchesAnyOfPatterns *michael.mast* -priority 11 -enabled $false
 new-clientaccessrule -name OutlookAnyhwere-Deny -Action DenyAccess -AnyOfProtocols OutlookAnywhere -priority 12 -enabled $false
 </pre>
 ==Notes==
 *Want to use email containerization for devices outside the LAN. Internal users can access from terminal servers or virtual desktops.

@@ Line 3: / Line 3: @@
 ==Restrict OWA access based on client IP==
-===Access to Exchange Online===
+Place holder to better organize content.
 Log into exchange online.
 <pre>
@@ Line 11: / Line 12: @@
 </pre>
-===Working with rules===
+==Working with rules==
 *According to MS, you should create a priority 1 rule so that you do not accidentally lock yourself out. When first starting out there are no rules in a relatively fresh Office365 configuration. Running "get-clientaccessrule" returns nothing<ref>https://docs.microsoft.com/en-us/powershell/module/exchange/client-access/get-clientaccessrule?view=exchange-ps</ref>, so run the following so not to shoot yourself in the foot.
 <pre>
@@ Line 153: / Line 154: @@
 </pre>
 ==Notes==
 *Want to use email containerization for devices outside the LAN. Internal users can access from terminal servers or virtual desktops.

@@ Line 7: / Line 7: @@
 <pre>
 $livecred = get-credential
-$session = New-PSSession -configurationname microsoft.excahnge -connectionuri https://ps.outlook.com/powershell/ -credential $livecred -authentication basic -allowredirection
+$session = New-PSSession -configurationname microsoft.exchange -connectionuri https://ps.outlook.com/powershell/ -credential $livecred -authentication basic -allowredirection
 import-pssession $session
 </pre>

@@ Line 105: / Line 105: @@
 activesync_test      6        True    False
 </pre>
-If we want to add more users to the list
+If we want to add more users to the list, we have to include the users already in the list.
 <pre>
 </pre>

@@ Line 74: / Line 74: @@
 IsValid                              : True
 ObjectState                          : Changed
 </pre>