We are finishing our migration from Ex2003 to Ex2007, and we've run into one internal application that must use POP3 to connect. In the old environment, it's application mailbox was on a separate server where POP3 was enabled (POP3 was not available for any users). What is the best way to configure POP3 in an Exchange 2007 world, where we only want to allow this application to connect? We know the two accounts/mailboxes it uses along with the 6 server IP addresses it uses. I'd rather avoid running a PS script to disable POP3 for the rest of our mailboxes unless there is some way to default all new mailboxes created in the future to have this disabled as well.

No there is now way doing this. So if POP3 is enabled then POP3 is enabled for All Accounts so you have to write a Powershell script in order to disable the POP Feature for a specified Mailbox. in order to disable POP for all accounts you can use: get-casmailbox | where {$_.popEnabled -eq "True"} | Set-CASMailbox -PopEnabled $False If you want to disbale POP for alll Accounts and enable it only for few Accounts you can use. $accounts = get-casmailbox foreach($account in $accounts) { if ($aacount.name -ne "POP enabled account") { set-casmailbox -identity $account.name -popenabled $False} }regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com

Hi, In Exchange 2007 RTM, you could only enable or disable POP3 access for a user by using the EMS. In Exchange 2007 Service Pack 1 (SP1), you can also enable or disable POP3 access for a user by using the EMC. More information about How to Enable POP3 in Exchange 2007 http://technet.microsoft.com/en-us/library/bb124934(EXCHG.80).aspx How to Enable or Disable POP3 Access for a User http://technet.microsoft.com/en-us/library/bb124578(EXCHG.80).aspx TechNet

Another option is to restrict the pop and secure pop port to the Exchange server except for the application server.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com