How to Configure Authentication for POP3

How to Configure Authentication for...

Applies to: Exchange Server 2007 SP1, Exchange Server 2007 Topic Last Modified: 2007-08-23

This topic explains how to use the Exchange Management Console and the Microsoft Management Shell to configure the authentication options for Post Office Protocol version 3 (POP3). In the original release (RTM) version of Exchange 2007, you could only configure authentication for POP3 by using the Exchange Management Shell. In Exchange 2007 Service Pack 1 (SP1), you can also configure authentication for POP3 by using the Exchange Management Console. Steps for doing this are included in this topic.

Note:
After you have configured authentication for POP3, you must restart the POP3 service. For more information about how to restart the POP3 service, see How to Start and Stop the POP3 Service.

Before You Begin

To perform the following procedures on a computer that has the POP3 service enabled, the account you use must be delegated the Exchange Server Administrator role and membership in the local Administrators group for the target server.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Procedure

Exchange 2007 SP1

To use the Exchange Management Console to configure POP3 to use TLS or SSL

In the console tree, expand Server Configuration, and then click Client Access.
In the work pane, click the POP3 and IMAP4 tab.
In the work pane, select POP3 and then, in the action pane, click Properties.
On the POP3 Properties page, click the Authentication tab.
Under Logon Method, select from one of the following:
1. Plain text logon (Basic authentication) No Transport Layer Security (TLS) connection is required for the client to authenticate to the server.
2. Plain text authentication logon (Integrated Windows authentication) No TLS connection is required for the client to authenticate to the server.
3. Secure logon A TLS connection is required for the client to authenticate to the server.
Click Apply, and then click OK to save your changes.

To use the Exchange Management Shell to configure authentication for POP3

If you will not be using TLS encryption and you want to allow Basic authentication on an unsecured port, run the following command:
```
Set-PopSettings -LoginType PlainTextLogin
```
If you will not be using TLS, but you want to restrict Basic authentication to use only secured ports, run the following command:
```
Set-PopSettings -LoginType PlainTextAuthentication
```
If you want to use TLS encryption before authentication, run the following command:
```
Set-PopSettings -LoginType SecureLogin
```

Exchange 2007 RTM

To use the Exchange Management Shell to configure authentication for POP3

If you will not be using TLS encryption and you want to allow Basic authentication on an unsecured port, run the following command:
```
Set-PopSettings -LoginType PlainTextLogin
```
If you will not be using TLS, but you want to restrict Basic authentication to use only secured ports, run the following command:
```
Set-PopSettings -LoginType PlainTextAuthentication
```
If you want to use TLS encryption before authentication, run the following command:
```
Set-PopSettings -LoginType SecureLogin
```

For more information about syntax and parameters, see Set-POPSettings.

For More Information

For more information about how to set up Secure Sockets Layer (SSL) on the computer that is running Exchange 2007, see Managing Client Access Security.

For more information about how to manage the POP3 protocol, see Managing POP3 and IMAP4.