i'm planning to implement a CBA for OWA access that will require a user certificate for authentication as this Document
http://www.microsoft.com/en-us/download/details.aspx?id=302
My question is: if i create a user certificate template to enroll for all domain users without selecting "Allow Private Key to be Exported" option. Can the user export the certificate "without the private key" and then import it to non-joined computer to use it for log in to OWA
Aaziz