Allow mail access to MS exchange 2003 but deny local logon

[langzi.lz () gmail com]

Hi all,

Is there any way to only allow user mail access to exchange 2003 (via pop3, imap or mapi) but do not allow the user to 
logon to workstation locally to windows domain?

Thanks!