Exchange ECP Restriction

Question

Hi

Can we restrict Exchange 2013 ECP URL base on IP address ?

Answer 1

hello,

you can Blocked this URL from Enpoint with the GPO : Sensitive Sites in Internet Option .

best regards .

Answer 2

Follow these:

https://www.alitajran.com/disable-external-access-to-ecp-exchange-2016/

https://social.technet.microsoft.com/wiki/contents/articles/52076.exchange-2016-restrict-access-to-the-eac-in-iis.aspx

https://blog.expta.com/2018/10/how-to-block-external-access-to.html

Answer 3

@Mohammed Nadeem

If you are using Exchange 2013/2016, you could use the "IP and Domain Restrictions" as said in the blog that AndyDavid provided.

In Exchange 2019, there exists a new function which is called Client Access Rules also could block access to the EAC based on IP Address. Due to Exchange 2013 will end of supported on "Apr 11, 2023", you could consider deploying Exchange 2019 as Internet facing server in the future.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 4

Hi

We are already using "IP and omain restriction" for OWA restriction for users and have around 10 vlans in it.

Same vlans we have added in ecp profile as well in IIS pool.

Those vlans can open ecp and we can't remove this vlan from ecp profile otherwise user wont' be able to change their password from owa.