Deny download & allow view of attachments with OWA 2016

LMS 156 Reputation points
2020-12-15T13:39:23.937+00:00

Hi

We have created a new mailbox policy and disabled the following property (Set-OwaMailboxPolicy -name NewPolicy DirectFileAccessOnPublicComputersEnabled $false) to deny download & allow only view the attachments with OWA 2016 (Exchange 2016 On-Premise). But once we apply the policy to end user, he could not view the attachments (we tried to view Word / excel / pdf files with different browsers). As a security recommendation we have to implement this policy. How can we fix the issue and allow view permission & deny download?

Thanks in advance

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,357 questions
0 comments
Accepted answer
  1. Andy David - MVP 142.2K Reputation points MVP
    2020-12-15T13:58:57.437+00:00

    With on-prem, you would really need to use OOS to make this happen effectively:
    https://bhargavs.com/index.php/2015/11/18/configuring-rich-attachment-preview-in-exchange-2016/
    https://learn.microsoft.com/en-us/Exchange/plan-and-deploy/install-office-online-server?redirectedfrom=MSDN&view=exchserver-2019

    With this architecture. you can allow viewing as a rich document and prevent downloading of office docs etc...

    1 person found this answer helpful.
    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kael Yao-MSFT 37,496 Reputation points Microsoft Vendor
    2020-12-16T03:07:55.453+00:00

    @LMS
    Hi,

    Agree with Andy,you need to install an Office Online Server to enable previewing attachments in OWA.

    By default, the following file types are displayed using Office Online Server:
    Word documents (doc, docx, dotx, dot, dotm extensions)
    Excel documents (xls, xlsx, xlsm, xlm, xlsb extensions)
    PowerPoint documents (ppt, pptx, pps, ppsx, potx, pot, pptm, potm, ppsm extensions)

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. LMS 156 Reputation points
    2020-12-16T06:08:40.387+00:00

    Thank You Andy & Kael

    OOS is already in place and used by OneDrive. So we will use / configure the same URL with Exchange.

    As of now we have 2 X Exchange servers in same Datacenter. Later we may have other servers in DR or may have some hybrid configuration. So we will apply the settings at server level, what do you think?

    Thank You.