Yeah, that sounds about right.
Suffice it to say, most companies do not have (or feel they have) the need for such data security, and they do not have the budget to spend on it anyway.
A good example is Cheddars, a regional restaurant chain. Their corporate email is run on Exchange. For their 500-odd users, they HAVE to have two dedicated Exchange admins on staff. TWO people, at about $40-75,000 each, just to make sure thair email system keeps working.
That’s an expenditure that most small businesses can’t justify.
(Note that I have no connection with Cheddars. I had to work with their IT personnel one day to resolve an email issue between one of my clients and their system).
FYI, I have one client that experimented with Exchange for two years, despite my recommendation against it. 50 users. They spent %100,000 on staff and equipment and ended up going back to the POP/LDAP solution because Exchange is a disaster (at their level).
Geez. I’ve got about 5,000 mailboxes on mine, and 2 of us split our time between that and directory maintenance. I’ll grant you it’s not the easiest system in the world to use, but a full time Exchange admin per 250 users doesn’t sound like a representative example.