Sometimes the company policies restricts external access to content and OWA is not a less, so if you need to restrict access to users here’s the commands you can run in PowerShell to enable/disable access:
Disable OWA Access
set-CASmailbox user@domain.com -OWAEnabled $false
Enable OWA Access
set-CASmailbox user@domain.com -OWAEnabled $true