QMM is being used to migrate users. Target users have the OWA access enabled after QMM has been used.
Goal is to disable OWA functionality in target (resource environment with disabled accounts) so target users will not be able to utilize OWA at all.
Can QMM be used to accomplish this?
The information about OWA access is visible when using the GUI.
Under Exchange Features there is an entry under Protocols - Outlook Web Access, which can be either enabled or disabled (see attached screenshot).
This information is stored in one of the AD attributes called protocolSettings and if desired this attribute can be skipped during migration/synchronization, in this case QMM will not migrate/synchronize the value and target account will not be OWA enabled.
When skipping the attribute should be skipped for the object class user.
This is not an officially recommended way how to administer OWA access, the article is just an explanation what can be done from technical perspective when using QMM to perform user migration/synchronization.
Since version QMM version 8.61 this attribute can no longer be skipped due to product design.