Lockdown email client?

Hey just wondering how to: “lock down IIS’s SMTP server so it can only be accessed from the server itself OR from outside with a username and password that’s NOT tied to NTLM”

Also: “make it clear that we’re not using Exchange.”

Quotes from my server admin friend. Thanks,