[stevedusa]

Hmm to my understanding, the security enforcement is pretty tight starting with Exchange 07 and the 08 ADs... depends on how the cert. is utilized in your environment.

After all, there is a reason for your sysadmin to issue you a certificate to begin with: security.

So to answer your question, I don't know, nor I know if it is even possible because the NAP can take over if the requirements doesn't meet.