Run this, it’ll export the info into a txt doc (c:exch.txt)
dsquery * domainroot -filter “(&(objectCategory=Person)(objectClass=User)(sAMAccountName=*))” -attr displayname protocolSettings -limit 800 > c:exch.txt
It may seem a bit difficult to decipher but
If there are names with no protocol Settings next to them then all protocols are still set to the default and have not been changed. (i.e. OWA is enabled)
If they have settings next to them then one of the protocols ha been changed. (may or may not be OWA, could have been POP3 for instance).
You are looking for
;HTTPõ0 = Disabled
;HTTPõ1 = Enabled
Hope this helps.