I have a client that wants to migrate services away from their on-prem server (active directory and exchange 2010 on SBS 2011 Standard) and into the cloud. The migration itself is not an issue.
The issue is maintaining some degree of security/privacy with email access through Outlook on shared workstations. After moving away from AD this will need to be considered.
I have two options as far as I'm aware for Windows accounts:
Create a Windows Account for every user (about 10) on every Workstation (three or four), to allow an individual Outlook profile to be created and secured. Management headache but security is maintained.
Create a common Windows Account on each workstation used by all users, with multiple Outlook profiles. Management is much easier, but individual privacy is completely lost.
I believe I can configure Exchange Online to require a password, but does this provide any security for messages already downloaded to the machine?
Is there another option?
Edit - Multiple versions of Outlook in use 2010 / 2013 / 2016.