Enable or disable POP3 or IMAP4 access to mailboxes

 

Applies to: Exchange Server 2016

Topic Last Modified: 2016-08-24

Learn how to enable or disable POP3 and IMAP4 access to specific mailboxes in Exchange 2016.

After you enable and configure POP3 or IMAP4 on an Exchange 2016 server as described in Enable and configure POP3 on an Exchange 2016 server and Enable and configure IMAP4 on an Exchange 2016 server, all user mailboxes (with the exception of the Administrator mailbox) can be accessed by using POP3 or IMAP4. You can use the procedures in this topic to disable POP3 and IMAP4 access to specific mailboxes.

For more information about POP3 and IMAP4, see POP3 and IMAP4 in Exchange 2016.

  • Estimated time to complete: 2 minutes.

  • The procedures in this topic don't apply to the Administrator mailbox, because you can't use POP3 or IMAP4 to connect to the Administrator mailbox. This limitation was intentionally included in Exchange 2016 to enhance the security of the Administrator mailbox.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Recipient provisioning permissions" section in the Recipients Permissions topic.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.

tipTip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection..

  1. In the EAC, go to Recipients > Mailboxes. In the list of mailboxes, select the mailbox, and then click Edit Edit icon.

  2. In the mailbox properties window that opens, click Mailbox Features.

    In the Email connectivity section, configure one or more of the following settings:

    • POP3   To disable POP3 access to the mailbox, click Disable, and then click Yes in the warning message that appears. If POP3 is already disabled, click Enable to enable it.

    • IMAP   To disable IMAP4 access to the mailbox, click Disable, and then click Yes in the warning message that appears. If IMAP4 is already disabled, click Enable to enable it.

    When you're finished, click Save.

    POP3 and IMAP4 access settings for a mailbox in the EAC at Recipients > select mailbox > Edit > Mailbox features > Email connectivity

To enable or disable POP3 or IMAP4 access to a single mailbox, use the following syntax:

Set-CasMailbox -Identity <MailboxIdentity> -PopEnabled <$true | $false> -ImapEnabled <$true | $false>

This example disables POP3 and IMAP4 access to the mailbox named John Smith.

Set-CasMailbox -Identity "John Smith" -PopEnabled $false -ImapEnabled $false

This example enables POP3and IMAP4 access to the mailbox named John Smith.

Set-CasMailbox -Identity "John Smith" -POPEnabled $true -ImapEnabled $true

For more information, see Set-CASMailbox.

  1. In the EAC, go to Recipients > Mailboxes.

  2. In the list of mailboxes, select multiple mailboxes of the same type (for example, User) from the list. For example:

    • Select a mailbox, hold down the Shift key, and select another mailbox that's farther down in the list.

    • Hold down the CTRL key as you select each mailbox.

    After you select multiple mailboxes of the same type, the title of the details pane changes to Bulk Edit.

    Bulk select mailboxes in the EAC
  3. In the details pane, go to POP3 or IMAP, click Enable or Disable, and then click OK in the warning message that appears.

You use the Get-Mailbox or Get-User cmdlets to identify the mailboxes that you want to modify. For example:

  • Use the OrganizationalUnit parameter to filter the mailboxes by organizational unit (OU).

  • Use the Filter parameter to create OPATH filters that identify the mailboxes. For more information, see Filterable properties for the -Filter parameter.

To enable or disable POP3 or IMAP4 access to multiple mailboxes, use the following syntax:

<Get-Mailbox | Get-User> <Filter> [-ResultSize Unlimited] | Set-CasMailbox -PopEnabled <$true | $false> -ImapEnabled <$true | $false>

This example disables POP3 and IMAP4 access to all user mailboxes in the North America\Marketing OU.

Get-Mailbox -OrganizationalUnit "OU=Marketing,OU=North America,DC=contoso,DC=com" -Filter {RecipientTypeDetails -eq 'UserMailbox'} -ResultSize Unlimited | Set-CasMailbox -PopEnabled $false -ImapEnabled $false

This example disables POP3 and IMAP4 access to all mailboxes in the Engineering department in Washington state.

Get-User -Filter {RecipientType -eq 'UserMailbox' -and Department -like 'Engineering*' -and StateOrProvice -eq 'WA'} | Set-CasMailbox -PopEnabled $false -ImapEnabled $false

For more information, see the Get-Mailbox and Get-User topics.

After you change the POP3 or IMAP4 access settings on a mailbox, you need to restart the POP3 and IMAP4 services on the server. You can do this by using the Windows Services console, or the Exchange Management Shell.

  1. On the Exchange server, open the Windows Services console. For example:

    • Run the command services.msc from the Run dialog, a Command Prompt window, or the Exchange Management Shell.

    • Open Server Manager, and then click Tools > Services.

  2. In the list of services, perform one or both of the following actions:

    • POP3:

      1. Select Microsoft Exchange POP3, and then click Action > Restart.

      2. Select Microsoft Exchange POP3 Backend, and then click Action > Restart.

    • IMAP4:

      1. Select Microsoft Exchange IMAP4, and then click Action > Restart.

      2. Select Microsoft Exchange IMAP4 Backend, and then click Action > Restart.

To restart the POP3 services, run the following command:

Restart-Service MSExchangePOP3; Restart-Service MSExchangePOP3BE

To restart the IMAP4 services, run the following command:

Restart-Service MSExchangeIMAP4; Restart-Service MSExchangeIMAP4BE

For more information about this cmdlet, see Restart-Service.

To verify that you've successfully restarted the POP3 or IMAP4 services, run the following command:

Get-Service MSExchangePOP3; Get-Service MSExchangePOP3BE; Get-Service MSExchangeIMAP4; Get-Service MSExchangeIMAP4BE

To verify that you've enabled or disabled POP3 or IMAP4 access to a mailbox, use either of the following procedures:

  • In the EAC, go to Recipients > Mailboxes > select the mailbox > click Edit Edit icon > Mailbox features > Email connectivity.

    • If POP3 access is enabled for the mailbox, you'll see POP3: Enabled and the Disable link. If POP3 access is disabled, you'll see POP3: Disabled and the Enable link.

    • If IMAP4 access is enabled for the mailbox, you'll see IMAP4: Enabled and a Disable link. If IMAP4 access is disabled, you'll see IMAP4: Disabled and the Enable link.

    POP3 and IMAP4 access settings for a mailbox in the EAC at Recipients > select mailbox > Edit > Mailbox features > Email connectivity
  • In the Exchange Management Shell, replace <MailboxIdentity> with the identity of the mailbox (for example, name, alias, or email address), and run the following command:

    Get-CasMailbox - Identity <MailboxIdentity> | Format-List PopEnabled,ImapEnabled
    

    Or, use the same filter that you used to enable or disable POP3 or IMAP4 access on the mailbox. For example:

    Get-User -Filter {RecipientType -eq 'UserMailbox' -and Department -like 'Engineering*' -and StateOrProvice -eq 'WA'} | Format-Table -Auto Name,PopEnabled,ImapEnabled
    
 
Show: