Deny download & allow view of attachments with OWA 2016

LMS 156 Reputation points


We have created a new mailbox policy and disabled the following property (Set-OwaMailboxPolicy -name NewPolicy DirectFileAccessOnPublicComputersEnabled $false) to deny download & allow only view the attachments with OWA 2016 (Exchange 2016 On-Premise). But once we apply the policy to end user, he could not view the attachments (we tried to view Word / excel / pdf files with different browsers). As a security recommendation we have to implement this policy. How can we fix the issue and allow view permission & deny download?

Thanks in advance

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,323 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 140.8K Reputation points MVP

    With on-prem, you would really need to use OOS to make this happen effectively:

    With this architecture. you can allow viewing as a rich document and prevent downloading of office docs etc...

    1 person found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Kael Yao-MSFT 37,486 Reputation points Microsoft Vendor


    Agree with Andy,you need to install an Office Online Server to enable previewing attachments in OWA.

    By default, the following file types are displayed using Office Online Server:
    Word documents (doc, docx, dotx, dot, dotm extensions)
    Excel documents (xls, xlsx, xlsm, xlm, xlsb extensions)
    PowerPoint documents (ppt, pptx, pps, ppsx, potx, pot, pptm, potm, ppsm extensions)

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. LMS 156 Reputation points

    Thank You Andy & Kael

    OOS is already in place and used by OneDrive. So we will use / configure the same URL with Exchange.

    As of now we have 2 X Exchange servers in same Datacenter. Later we may have other servers in DR or may have some hybrid configuration. So we will apply the settings at server level, what do you think?

    Thank You.