Sometimes the company policies restricts external access to content and OWA is not a less, so if you need to restrict access to users here’s the commands you can run in PowerShell to enable/disable access:

Disable OWA Access

set-CASmailbox user@domain.com -OWAEnabled $false

Enable OWA Access

set-CASmailbox user@domain.com -OWAEnabled $true