Any creative suggestions as to how to allow Outlook Anywhere for only a sub-set of your users? Assume we'd want a small percentage of users 'enabled.' - Separate CAS server? restricted certs? THis would be for external access of mailboxes via Outlook 2007 & 2010. All ideas welcomed. Thanks!

If you are publishing via ISA/TMG, you can manage who is allowed to use that rule.Tim Harrington - Catapult Systems - http://HowDoUC.blogspot.com

We had this discussion come up recently in-house. Because there is a way to disable on a per-user basis only you’d have to schedule a script to run. Like this: $ActiveSyncEnabledUsers = Get-Content ActiveSyncEnabledUsers.txt Get-CASMailbox -resultSize unlimited -filter {ActiveSyncEnabled -eq $true} | Foreach-Object { if($ActiveSyncEnabledUsers -contains $_.Name) { $_ | Set-CASMailbox -ActiveSyncEnabled:$true } else { $_ | Set-CASMailbox -ActiveSyncEnabled:$false } } Mike Crowley Check out My Blog!

oops, just realized you said outlook anywhere, not activesync. no problem. same script, but use MAPIBlockOutlookRpcHttp instead. "The MAPIBlockOutlookRpcHttp parameter specifies whether clients can connect to Outlook by using Outlook Anywhere." -ref: http://technet.microsoft.com/en-us/library/bb125264.aspx Mike Crowley Check out My Blog!