Upper MGT wants to limit OWA access to a group of employees. This control would allow this group of employees to access OWA from only at work, ie no email access at home. I still want to keep OWA access on the outside on for Upper MGT, but off for everyone else. OWA acess on the inside is on for everyone. We don't have an ISA firewall or a firewall that can talk with AD. We are running Server 2003R2 with Exchange 2007. Any idea on how to set this up? TIA John

You can disable OWA on a per-user basis, but this setting would also apply internally. I am not aware of any other way to control access to OWA based on multiple criteria, such as group/username and subnet. You can easily do one or the other, or both, but finding something that matches "If" "And" is going to be tough without a firewall like the kind you stated you don't have. You could schedule a script to swap stuff around based on a time of day or something, but i doubt thats what you were really looking to do.