Question : Is there any way to restrict WHERE users can have access to OWA (Exchange 2007)?

If I allow a domain user the ability to access OWA externally, is there any way with a cert or something that I can restrict WHERE he accesses from? I.E. aside from merely demanding that he not use OWA from public kiosk machines, is there any way for me to prevent him from doing so?

Thanks, This debate has been going on for a while at our shop. I say no there isn't, because if you issue me a cert or give me the ability to request a cert be issued so that I can download it to whatever computer I am using, the enterprise still has no way of knowing what kind or whose machine I am at.  Am i wrong or Am I wrong?

Answer : Is there any way to restrict WHERE users can have access to OWA (Exchange 2007)?

OWa will use the certificate installed in IIS and issuing a cert for installation elsewhere won't make any difference.

The only way to restrict access is via IP addresses on your firewall / router, which is not in the least bit practical.

Short answer is NO, you can't restrict access from anywhere (easily).