FYI, here's a post I made about doing this a while back with more details if anyone is interested. -
LINK
At the time, my wife was using 1and1 for her exchange hosting provider and they put that security in. They wouldn't remove it and I later moved her to Sherweb. <soapbox> They have a newer version of Exchange, more space, and no security policy like this</soapbox>