I'm trying to determine the best/ most efficient way to control access to Outlook thick clients for company email. My goal is to have it so unless they are accessing company email from a registered device in AD that it 1) won't show any mail that was possibly downloaded prior to access policies being enforced and 2) not attempt to pull mail down from the server regardless of user knowing their username/password. We work with I.P. and is very important that both criteria above are met otherwise we are stuck with no access to email outside the office. Any advice on where to look or a solution would be very much appreciated. We are trying to achieve this with little to no 3rd party applications and on a shoe string budget. Cheers!