I've read up and tested how to disable Outlook Anywhere for a specific user... and then read up on how to disable for all users. Oy. It seems too big a pain to deal with. Question to anyone out there - do you worry about user making Exchange connections with home machines and not knowing about it? Let me know if there's something I'm missing that can help what I'm trying to do. I basically had in mind to disable Outlook Anywhere for all users except ones with company laptops. Thanks..

Outlook Anywhere is the way of the future. In all of my deployments I use it exclusively unless I have a Blackberry or other kind of system that doesn't understand how to use OA. If you want to prevent unauthorized computers from connecting, you can use certificate-based authentication, but that'd be a bit of trouble. Its common for people to bring their own device to connect to email. While statement traditionally refers to smartphones, I don't see how a home PC is much different from an academic perspective. Mike Crowley | MVP My Blog -- Planet Technologies

thanks. you have a point there. with smartphones, it's easy to quarantine after an activesync connection. i was hoping for something similar with Outlook Anywhere... but, oh well.

Depends, we disable for call center agents, in addition to activesync. For for you case use UAG\TMG to enforce a policy such as allowing only company computers to access internal resources.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com