We have kind of strange requirement, we have 3 Exchange Server and are in 3 different forests.

All users computers are joined to one single domain say ABC.local where all users gets authenticated.

Now we want to restrict cache mode configuring of Outlook for the Exchange which is installed in ABC.local domain. 

If we try to restrict it by Group Policy then other 2 forest exchange users also will not be able to configure cached mode. So not sure how to achieve this. 

For Group Policy what my understanding is if user A login to PC and if i apply the GPO, it will be effected on the Outlook. Which means the same user A will not be able to configure ABC.com domain in cached mode which is possible. But the problem here is the same user need to configure other domain accounts in cache mode as well which is from different exchange servers xyz.com and 123.com and this GPO will restrict that as well. We dont want to restrict user A from configuring cache mode for other domian (xyz and 123.com).

 ABC.local also we need to have some exception where higher management should be excluded from this policy(they should be allowed to configure cached mode).

Can anyone one help me to achieve this scenario.

Thanks,
Vijesh

Hi Vijesh,

I am not quite sure about your environment. I noticed that there are three different forests with three Exchange servers.

Generally, if you have three mailboxes (A@abc.com, A@xyz.com and A@123.com) in three Exchange servers in different forests (abc.com, xyz.com and 123.com), we should have three user accounts (abc.com\A, xyz.com\A, 123.com\A) in AD. There would be three DCs for different forests.

If that is the case, we can create the group policy to disable cached mode for specific domain on DC of the forest (abc.com).

Group Policy registry path: HKEY_CURRENT_USER\software\policies\microsoft\office\15.0\ outlook\cached mode!enable

If you still have any question about group policy creating, we can ask a question in Group Policy forum for more help:

https://social.technet.microsoft.com/Forums/windowsserver/en-us/home?forum=winserverGP

Regards,

Hi Winnine,

The only problem here is all these 3 forests and Exchange server are with in our environment itself. And all users computer are connected and authenticated via only one Domain Controller (ABC.com). GPO is also applied from that domain controller (ABC.com).  

The other 2 domains are just to support the Exchange server and to create users no computers are joined those domains so no point in setting up any GPO.

So if a user who has 3 email ID's  U@abc.com from main domain and other 2 U@123.com and U@xyz.com. All these 3 ID's will be configured on his same outlook. Now with U@abc.com domain user will authenticate on his computer and login and if we set any GPO it will effect the other email accounts as well. 

Please let me know if you need more clarity, i am pretty bad in explanations.

Thanks,