deploy self-signed exchange 2007/2010 certificate for outlook anywhere

http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/managing-exchange-certificates-part2.html

the main points here is

gpmc.msc

create a GPO, in computer node ...windows settings .... security settings ... public key policies ...