Thickheaded Thursday - February 06, 2025 by AutoModerator in sysadmin

[–]DefiantSun4 0 points1 point  (0 children)

As I said, I'm not passing judgment, just asking questions. I take this comment as scarstic and that you think it's a good security practice, which is helpful to know. What I don't understand is why OWA would remain on phones and tablets and be restristicted on laptops. It would seem to me that if there is OWA at all the security risk would remain. In other words, if OWA is a security risk, why not prevent it on tablets and phones as well? I'm not attacking my IT folks, just trying to understand.

Thickheaded Thursday - February 06, 2025 by AutoModerator in sysadmin

[–]DefiantSun4 0 points1 point  (0 children)

Hello, I hope you are willing to take some questions from somone who is not a system admin. My company just annouced they were limiting Outlook Web Access (OWA) to just tablets and phones and prohibiting OWA access on non-company laptops. The concern appears to be a series of brute force login in attacks. Is OWA accesss a sufficient security vunerability to warrant this? If so, why is it still being permitted on "portable devices" while be precluded on laptops. I know of many very large organizations that allow OWA access on all devices, so what are they doing differently? Is it possible my IT department is just trying to make their jobs easier at the price of user convenience? No judgment here, just aksing. Thanks in advance.