2.1.4 [RFC3501] Section 7.2.1, Server MUST Support STARTTLS, LOGINDISABLED, and AUTH=PLAIN Capabilities

The specification states that the server implementation MUST support the STARTTLS, the LOGINDISABLED, and the AUTH=PLAIN capabilities.

When the client uses SSL to connect to the server, Microsoft Exchange Server does not support the LOGINDISABLED capability by default, but it can be configured to do so.