A method and system method for e-mail management of e-mails having embedded classification metadata. A query from an end user to access an e-mail account by an e-mail client is received. It is then determined whether the query has come from an insecure e-mail client, such as a web e-mail client. Access rules for defining classification access restrictions for the e-mail client to access e-mail in the e-mail account are retrieved when the e-mail client is determined to be insecure. The e-mail query can then be modified before sending to an e-mail server storing the email account. The query is modified based on the retrieved access rules to exclude retrieval of e-mails based upon the e-mail classification metadata.