I've done this a while ago but forget exactly how :) Basically I set up 3 users a while back in OWA and removed GAL and public folders using adsi edit and numerical values on an attribute. From memory each OWA feature had a numerical value and you add the features value togther to form a total. That total is the value for the attribute in ADSI. I'm looking for the microsoft article. I've had a quick look for it but can't see it emmeditaly and I've just got back from a 3 week holiday and can't spend any longer on the one task (1200 emails in inbox and rising). 500 points for whoever googles like a pro :)
This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.