Hello all!
We are moving into Exchange 2010 – 2013 coexistence and I have been asked to find a way to lock down Outlook for home users. I’ve done a good bit of research and it isn’t looking promising, so I’m posing the question to you fine minds!
The basic scenario is:
- An employee connects Outlook cached mode on his home computer to his company mailbox. It works fine because this user has a mail-enabled AD account and a company computer with Outlook set up.
- Later down the road, that employee separates from the company. We disable his account and go through all the standard operating procedures for terminating a user.
- The user, whenever he likes, goes home and opens up Outlook on his home computer. All he has to do is hit Cancel on the authentication prompt and he has access to all of his old cached email and contacts.
For obvious reasons, this is a huge security / business risk. How do we prevent it from happening?
Of course, Outlook connectivity for production machines cannot be affected internally or externally.
I know this can be accomplished via GPO, but home user computers aren’t domain-joined J
Any ideas?
Thank you in advance!