

The example I used was to block access to OWA externally – something that was not possible until now, even in federated scenarios, unless you were willing to sacrifice some other functionalities, or to use Azure AD Conditional access. This in turn means you need to be very careful not to block PowerShell access, or you will be forced to place an awkward support call 🙂 I would strongly advise you to review the documentation before creating any Client Access Rule!Īssuming you’ve familiarized yourself with the process, you can fire up a connection to Exchange Online PowerShell and create your first CAR. Let’s go.įirst of all, managing of Client Access Rules is all done via PowerShell. Sadly I still don’t have CARs across all my tenants, but it’s enough to give the feature a quick test. Namely, Client Access Rules, or the functionality that allows us to control access to Exchange Online based on location, protocol and authentication type. The wait is over – one of the most requested features has finally hit my tenant.
