This is a bit of a WTF, because the MS documentation doesn't seem to match up with the implementation.

There are two policy settings that seem to prevent users from establishing their own personal accounts if they are using your Exchange 2007 ActiveSync service. The first is:

AllowPOPIMAPEmail

This setting specifies whether the user can configure a POP3 or an IMAP4 e-mail account on the device.

The other setting is:

AllowConsumerEmail

This setting specifies whether the mobile device user can configure a personal e-mail account (either POP3 or IMAP4) on the device.

Actually, this second setting is not for controlling POP3 and IMAP4. Configuring this setting to True tells the Windows Mobile 6.1 device to block "WLMService.DLL", which is responsible for connecting to Windows Live services.

So if you configure AllowConsumerEmail = False in your policy, you'll block the use of Hotmail, Live Messenger and all other Live services. If you really wanted to block POP3 and IMAP4 services, use the AllowPOPIMAPEmail = False setting instead.

Addendum: AllowConsumerEmail also looks like it blocks Windows Updates for your Mobile device. It wasn't working, then I set AllowConsumerEmail to True, and lo and behold it started working.

No Comments