1

My company has a security concern and they have requested to disable storing all offline cache copies of office 365 emails.

We use outlook 2016, thunderbird and the exchange server is office 365 tenant. We use different operating systems, such as mac/ubuntu/fedora/widnows to access emails which makes hard to stick to local group policy to block storing offline cache copies.

We are trying to disable storing emails offline. What I have tried is I have applied a policy using "Outlook Web App policies" in ourlook 365 via https://outlook.office365.com/ecp/ "permissions" ----> "Outlook Web App policies" and disabled offline access in the below manner.

enter image description here

Unfortunately it works only for webaccess. As intended It will disable offline storing in https://outlook.office.com/owa/?path=/options/offlinesettings/mode/popup

If a user tries to enable offline access via https://outlook.office.com/owa/?path=/options/offlinesettings/mode/popup

this message will appear, which is as expected.

enter image description here

The problem lies with outlook and other clients such as thunderbird. "Outlook Web App policies" wont disable offline access for outlook/thunderbird etc.

It will still allow users to save offline copies in outlook/thunderbird etc.

enter image description here

So was looking for an viable alternative. and found this https://docs.microsoft.com/en-us/previous-versions/office/exchange-remote-connectivity/dd439383(v=exchg.80)

It gives Set-CasMailbox MailboxName -MapiBlockOutlookNonCachedMode:$false

but again its only for onpremis-exchange according to this .

enter image description here

MapiBlockOutlookNonCachedMode seems not working for office 365.

enter image description here

Any viable option/advice to achieve above goal to disable storing all offline cache copies of office 365 emails.? Thanks a lot in advanced.

2
  • 1 Problem with group policies is we use linux ,mac, windows doman/non domain join computers. so the group policies applied at end point is tedious task. that is why i m looking for exchange server side option/policy
    – user879
    May 16, 2018 at 3:00
  • My company has a security concern and they have requested to disable storing all offline cache copies of office 365 emails. Classic. Once data leaves the server, you lose control.
    – Greg Askew
    May 19, 2018 at 16:26

2 Answers 2

2
+50

My company has a security concern and they have requested to disable storing all offline cache copies of office 365 emails.

I don't think that's possible or even reasonable. At least if you want a serious and permanent solution.

The only way I can think of in your scenario with multiple operating systems and clients, it's to simply disable everything (POP3, IMAP, ActiveSync) but the webmail. Otherwise it's up to the client (thunderbird, desktop outlook or even mobile email clients) to decide when the cached timeout will occur.

And even if you forced everything through GPO or webmail, if someone wants to keep an offline copy, they could simply download it or forward their mail to another (personal) account with the ability to save it.

You might want to have a chat with management and try to explain that doing this wont be cost effective nor practical. Or at least, ask what's their security concern, so you can see if there are other methods to clear them.

-2

As per Outlook client, you may try to disable Cached mode using GPO:

User Configuration > Administrative Templates > Microsoft Outlook 2016 > Account Settings > Exchange > Cached Exchange Mode > Use Cached Exchange Mode for new and Existing Outlook Profiles:

enter image description here

enter image description here

1
  • problem with group policies is we use linux, mac, windows doman/non domain join computers. so the group policies applied at end point is tedious task. that is why i m looking for exchange server side option/policy;
    – user879
    May 16, 2018 at 3:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .