How to enable owa only for a class of IPs, original problem: Outlook NEW needs OWA enablet

Question

How to enable owa only for a class of IPs, original problem: Outlook NEW needs OWA enablet

Eros Rodigari 0

Hi everyone, I'm trying to solve an issue related to the new version of Outlook (Outlook NEW), which requires OWA (Outlook Web App) to be enabled in order to function correctly.

In our environment, OWA is currently disabled for security reasons. However, to make Outlook NEW work, we are considering enabling OWA — but only for a specific range of IP addresses.

Is there a way to allow OWA access only from a specific class or range of IPs, while keeping it blocked elsewhere?

We are using Exchange Online (Microsoft 365).
Any suggestions would be greatly appreciated!

Thanks in advance!

1 answer

Your answer

Answer 1

Anonymous

Hi @Eros Rodigari ,

Welcome to the Microsoft Q&A platform!

You can use Conditional Access policies in Azure Active Directory . Here are the steps to achieve this:

Create a Conditional Access Policy:

Go to Azure Active Directory > Security > Conditional Access.

Click on New policy.

Under Assignments, select Users and groups and choose the users or groups you want to apply this policy to.

Under Cloud apps or actions, select Office 365 Exchange Online.

Click on Create to create the policy.
User's image

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Eros Rodigari 0 Reputation points

2025-04-01T09:07:10.32+00:00

Thank you for the reply @Anonymous !

However, as far as I know, using Conditional Access policies in Azure Active Directory requires at least a Microsoft Entra ID Premium P1 license, right?

In our case, we are using Microsoft 365 Business Standard, which unfortunately does not include Conditional Access features.

Is there any alternative way to restrict access to OWA based on IP address with our current licensing level? Or would upgrading to a plan with Entra ID P1 be the only way?

Thanks again for your help!
Anonymous

2025-04-01T09:44:41.3666667+00:00

I guess I seem to have complicated the problem, you can configure the mailbox to have Outlook on the web enabled or not as shown below:
Eros Rodigari 0 Reputation points

2025-04-03T12:43:24.12+00:00

By disabling OWA, the new outlook desktop no longer works. OWA must be enabled, I just want some users to be able to access only from some specific IPs.

And unfortunately we have Microsoft 365 Business Standard and Conditional Access policies in Azure Active Directory requires at least a Microsoft Entra ID Premium P1 license, right?

Share via

How to enable owa only for a class of IPs, original problem: Outlook NEW needs OWA enablet

1 answer

Your answer