Buy them a SBS license and move their email to Exchange on SBS, you
do not have control or security for email if you allow them to use POP
accounts outside your organization.
You cannot trust your best friends, your five senses, only the little
voice inside you that most civilians do not even hear -- Listen to that.
firstname.lastname@example.org (remove 999 for proper email address)