UPDATE:  I’ve included a 2007 version below the 2010 version.

The same prerequisites exist from the EAS script.

Prerequisites:

1. Create a Universal security group
2. From the EMS, get the GUID for the newly created group

   Get-group 'Group Name' | Select GUID

   I wanted to use the GUID to prevent the script from breaking in the event someone changed the group name.

You will need to populate the $grpguid variable with the GUID you obtain from Prerequisite #2. Once complete, schedule to run on a machine that has the Exchange cmdlets and you will be off and running.  Once you want to control who is enabled, simply populate the group  that you created in Prerequisite #1 with users who’ve been approved to utilize POP3.

Exchange 2010 Version:

##########################################################################
# ScriptName: Set-POP3.ps1
# Author:     John Barsodi
# Date:       07/24/11
# Version:    .1
# Desc:       Disables the POP3 feature to False if not member of
# Desc:       the AD group <Enter Your Group Name>
# Tags:       Group POP Exchange 2010
##########################################################################
Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010
Set-ADServerSettings -ViewEntireForest $true
$grpGuid  = "YourGroupGUIDHere"
$grpdn = (Get-group $grpGuid).DistinguishedName
$grpBind = [ADSI]"LDAP://$grpdn"
$members = $grpBind.Member
$EnabledPOP = (Get-CasMailbox -resultsize unlimited | where {$_.POPEnabled -eq "True"})
Foreach ($obj in $EnabledPOP){
	$UserDN = $obj.DistinguishedName
	$UserDisplayName = $obj.Name
  		If($members -contains $UserDN){
    		Write-Host -ForegroundColor Green "$UserDisplayName found in Group"
   		}
  		Else{
   			Set-CasMailbox $UserDisplayName -POPEnabled $false
   			Write-Host -ForegroundColor Red "$UserDisplayName not found in Group, POP Disabled."
  		}
}

Exchange 2007 Verison:

##########################################################################
# ScriptName: Set-POP3.ps1
# Author:     John Barsodi
# Date:       07/24/11
# Version:    .1
# Desc:       Disables the POP3 feature to False if not member of
# Desc:       the AD group <Enter Your Group Name>
# Tags:       Group POP Exchange 2007
##########################################################################
Add-PSSnapin Microsoft.Exchange.Management.PowerShell.Admin
$AdminSessionADSettings.ViewEntireForest = $True
$grpGuid  = "YourGroupGUIDHere"
$grpdn = (Get-group $grpGuid).DistinguishedName
$grpBind = [ADSI]"LDAP://$grpdn"
$members = $grpBind.Member
$EnabledPOP = (Get-CasMailbox -resultsize unlimited | where {$_.POPEnabled -eq "True"})
Foreach ($obj in $EnabledPOP){
	$UserDN = $obj.DistinguishedName
	$UserDisplayName = $obj.Name
  		If($members -contains $UserDN){
    		Write-Host -ForegroundColor Green "$UserDisplayName found in Group"
   		}
  		Else{
   			Set-CasMailbox $UserDisplayName -POPEnabled $false
   			Write-Host -ForegroundColor Red "$UserDisplayName not found in Group, POP Disabled."
  		}
}

1. Hand it over to a Helpdesk Analyst and have the output make sense to them
2. Consume the script logic into a much larger health and status check on a per user basis script.
3. Make it possible for the scripts executor to have no knowledge of the Exchange environment other than having the Exchange Management tools installed.

A few challenges arose during this process:

1. A multi-site Exchange environment requires Site & Hub Transport discovery of the site that the mailbox is homed.  If you were a Helpdesk Analyst you most likely wouldn’t know this information.
2. There could be multiple Hub Transport servers in a site and message tracking events could exist on both.
3. Performance hit on the Hub Transport servers in the event 30 days was opt’d for.

I’m not going to include the entire script in the body of this post, you can download it at the bottom, but I want to call out a few sections:

The logic behind the Site & Hub Transport discovery

Here is the cross selection of the script that requests the SMTP Address of the user who you want to report against.  From here we determine the Mailbox server and correlating AD Site.  Once we’ve determined the site we can then grab a list of Hub Transport servers to query against.

$user = Read-Host "What is the users email address?"
$MbxServer = (get-mailbox $user).Servername
$Site = (Get-exchangeserver $MbxServer).site.name
$SiteHTServers = Get-Exchangeserver | Where {($_.IsHubTransportServer -eq $true) -and ($_.site.name -like "$Site")}

The second and last second piece of logic I wanted to focus on is the use of a Switch statement which was new to me.  I’ve used Case statements in VB programming in my past, so it was relatively easy to understand. Essentially we are defining variables based the $DateInput variable which is the value the user enters interactively for the number of days.

switch ($DateInput)
    {
        1 {
           $StartDate = $today
           $Days = 1
           $SizeFactor = "1KB"
           $SizeLabel = "KB"
           break;
          }
        2 {
           $StartDate = (get-date).adddays(-7).ToString("MM/dd/yyyy")
           $Days = 7
           $SizeFactor = "1MB"
           $SizeLabel = "MB"
           break;
          }
        3 {
           $StartDate = (get-date).adddays(-14).ToString("MM/dd/yyyy")
           $Days = 14
           $SizeFactor = "1MB"
           $SizeLabel = "MB"
           break;
          }
        4 {
           $StartDate = (get-date).adddays(-30).ToString("MM/dd/yyyy")
           $Days = 30
           $SizeFactor = "1GB"
           $SizeLabel = "GB"
           break;
          }
        default {
           "** The selection could not be determined **";
           break;
          }
    }

You can download the full script here: get-messagetracking.txt

Here’s an example of how to use it.  Let’s say my anniversary date was October 1, 2010 or “10/01/10″ for this example.

First we want to figure out what today is using the Get-Date cmdlet.  Then we want to define our anniversary date and then take the difference of the two.

$today = Get-Date
$anniversary = "10/01/10"
[datetime]$anniversary - $today

This will generate output like similar to this:

Days              : 59

Hours             : 11

Minutes           : 30

Seconds           : 49

Milliseconds      : 80

Ticks             : 51390490805093

TotalDays         : 59.4797347281169

TotalHours        : 1427.51363347481

TotalMinutes      : 85650.8180084883

TotalSeconds      : 5139049.0805093

TotalMilliseconds : 5139049080.5093

$today = Get-Date
$anniversary = "10/01/10"
([datetime]$anniversary - $today).days