All versions of Outlook are allowed to access the server

All versions of Outlook are allowed to access the server

The Microsoft® Exchange Server Best Practices Analyzer Tool reads the following registry entry to determine whether any versions of Microsoft Office Outlook® are blocked from connecting to Exchange Server:

HKLM/System/CurrentControlSet/Services/MSExchangeIS/ParametersSystem

If the Exchange Server Best Practices Analyzer finds that the Disable MAPI Clients key does not exist, a warning is displayed.

The Disable MAPI Clients key, which is not enabled by default, lets an administrator block specific versions of Outlook from connecting to a computer that is running Exchange 2000 Server or Exchange Server 2003.

The most recent releases and service packs Outlook include many security and virus-fighting enhancements. Beginning with Outlook 2002, attachment blocking and Object Model Guard are included and enabled by default. These features are a critical component in the overall fight against viruses. The oldest version of Outlook that is supported by Product Support Services is Outlook 2000 SP3. If you are running older versions of Outlook in your organization, upgrade to Outlook 2003 or, at a minimum, update the Outlook client with the latest security releases.

After you update Outlook, you can lock out access to Exchange from earlier versions of Outlook that have not been updated. Locking out earlier versions of Outlook that do not support attachment blocking and Object Model Guard helps provide a known level of client security for MAPI client connections.

There are four possible ranges to describe the MAPI client version in the Disable MAPI Clients registry string value:

•	6.0.0-7.0.0: Prevents versions 6.0.0 through 7.0.0
•	6.0.0-: Prevents version 6.0.0 and later versions
•	-9.0.0: Prevents all versions up to 9.0.0
•	10.0.0: Prevents this version only

Important :

After you add the registry string value, you must stop and then restart the information store service for the new value to take effect.

To help protect against all outdated versions of Outlook (Outlook 98 without a security update installed, and earlier versions), it is recommended that you disallow all versions of Outlook with build numbers equal to or earlier than 5.5.2178.0 from connecting to Exchange Server.

The client itself dictates the client's version string. This string is similar to the version number reported in the About dialog box for the client. However, do not rely on this version number. Instead, use Exchange System Manager to view the Client Version property on the Mailbox Store Logons page.

Important :

The string reported in Exchange System Manager has an additional value. For example W,X,Y, and Z. When you configure your server size registry string value, us a string that is based on the values in the W, Y, and Z positions. Do not include the value found in the X position. For example, if the version shown in Exchange System Manager is 10.0.1.1234, and you want to specifically stop these users, implement the registry string value with a data value of 10.1.1234.

Outlook Version	Build Number
Outlook 2003	11.5604.0
Outlook 2002 SP3	10.0.6515
Outlook 2002	10.0.2627
Outlook 2000 SP3	5.3165.0
Outlook 2000 SR1a	5.321.0
Outlook 98, with security update installed	5.2652.57
Outlook 98	5.2178.0

Important :

This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restore the Registry" Help topic in Regedit.exe or Regedt32.exe.

To correct this warning

1.	Open a registry editor, such as Regedit.exe or Regedt32.exe.
2.	Navigate to: HKLM/System/CurrentControlSet/Services/MSExchangeIS/ParametersSystem
3.	Create a new REG_SZ entry named Disable MAPI Clients.
4.	Double-click the Disable MAPI Clients registry entry and set the value data to the level that you want. The list of values in the Value Data string represents the different ways that you can disable ranges of MAPI client versions. The versions (vX) are typically in the following formats: • For Microsoft Outlook 2002: Maj.Min.Build • For Microsoft Outlook 2000: Maj.Build.Dot • For earlier versions of Microsoft Outlook: Maj.Min.Build
5.	Close the registry editor and restart the Microsoft Exchange Information Store service for the change to take effect.

Before you edit the registry, and for more information about how to edit the registry, see Microsoft Knowledge Base article 256986, "Description of the Microsoft Windows Registry," (http://go.microsoft.com/fwlink/?LinkId=3052&kbid=256986).

For more information about blocking specific MAPI clients from connecting to an Exchange 2000 Server or Exchange Server 2003 computer, see Microsoft Knowledge Base article 328240, "How to put server-side restrictions on clients that are used to access Exchange 2000 mailboxes," (http://go.microsoft.com/fwlink/?linkid=3052&kbid=328240).

For more information about downloading Security Updates for older versions of Outlook and blocking other versions of Outlook, see Slowing and Stopping E-mail Transmitted Viruses in an Exchange 2003 Environment (http://go.microsoft.com/fwlink/?LinkId=30732).