DOCUMENT:Q192510  17-APR-1999  [exchange]
TITLE   :XIMS: Where to Enable NT Challenge Response for POP3
PRODUCT :Microsoft Exchange
PROD/VER:WINDOWS:5.0,5.5
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Exchange Server, versions 5.0, 5.5 
-------------------------------------------------------------------------------

SUMMARY
=======

This article shows how and where to enable Windows NT Challenge Response (NTLM)
for Exchange Server. NT Challenge Response security is intended to work with the
Secure Password Authentication offered by Microsoft e-mail clients, such as
Outlook Express. This offers a higher degree of security than Basic Clear Text,
which is more vulnerable to being discovered and used.

MORE INFORMATION
================

To use Secure Sockets Layer security (SSL), which is equivalent to TLS,
Transport Layer Security, you need to have Internet Information Server (IIS)
installed along with the Private/Public Key Pair that has been certified by a
Certificate Authority (CA).

To enable NTLM security, there are two locations in Exchange Server that need to
be explained. POP3 can be implemented and controlled at the server level and/or
at the site level. Enabling POP3 at the server level means that the protocol and
settings are specific to that server. Enabling POP3 at the site level means any
server in the site can use site default settings. Using site level settings
frees an administrator from having to configure each server individually when
there is a site-wide change.

Enabling NTLM and POP3 Protocol at the Server Level
---------------------------------------------------

1. Start the Exchange Server Administrator program.

2. Expand on Organization\Site\Configuration\Servers\<your
   server>\Protocols to the Server Protocols object.

3. Select the Protocols object. On the right pane, you will see the POP3 (Mail)
   Settings object. Double-click it, and the properties for the POP3 protocol on
   this server will be displayed.

4. On the General tab, clear the "Use Site defaults for all properties" check
   box. The server will now be using server-specific POP3 settings.

5. Click the "Enable Protocol" check box. The POP3 protocol is now enabled at
   this server. You do not have to restart.

6. Click the Authentication tab. There are two options for enabling NT Challenge
   Response--with and without SSL security. If you do not require SSL, click
   only the "NT Challenge Response" check box. If you require SSL, then click
   only the "NT Challenge Response Using SSL" check box.

Enabling NTLM and POP3 Protocol at the Site Level.
--------------------------------------------------

1. Follow steps 1 through 3 above, then on the General tab, click the "Use Site
   Defaults for All Properties" check box. The server will now be using the site
   POP3 default Settings.

2. Expand on Organization\Site\Configuration\Protocols to the Site Protocols
   object.

3. Select the Protocols object. On the right pane, you will see the POP3 (Mail)
   Site Defaults object. Double-click it, and the properties for the POP3
   protocol for the site will be displayed.

4. On the General tab, click the Enable Protocol check box. The POP3 protocol is
   now enabled for the Site. You do not have to restart.

5. Click the Authentication tab. There are two options for enabling NT Challenge
   Response--with and without SSL security. If you do not require SSL, click
   only the "NT Challenge Response" check box. If you require SSL, then click
   only the "NT Challenge Response Using SSL" check box.

Additional query words: Enabled NTLM Security POP3 Howto kbinfo

======================================================================
Keywords          :  
Technology        : kbExchangeSearch kbExchange500 kbExchange550 kbZNotKeyword2
Version           : WINDOWS:5.0,5.5
Issue type        : kbhowto

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 1999.