NimbostratusHi all, I've successfully deployed iApp fo Exchange 2013 LTM+APM. Now I would like to create policy that allow or deny access to OWA based on AD groups. Now my policybased on ADquery allow access to both OWA and ActiveSync but I need to create 2 AD groups: first for OWA and ActiveSync clients second for only ActiveSync
No idea how to do it.
You can identify owa (web browser) vs activesync (microsoft exchange client) using a client check:
and you can check AD group membership with AD Query or LDAP Query:
Then it's just a matter of designing your VPE so the Allow and Deny are appropriate for the matches you want.
Hi, you can edit your policy to check the landing URI of the request and perform different AD queries based on that URI. I assume that since you already have your policy working for OWA and ActiveSync, you must have this set up already and you would only need to add another leg to your policy to split those two services.
