My bad. It seems fetchmail doesn't do exchange, but can do excahange type auth (NTLM) when using IMAP.