Unanswered OWA allows access to everyones' mailbox.

  • Wednesday, September 13, 2006 4:46 PM
     
     
    Once you are logged into OWA you can type other users' names into the url and access their mailboxes. This seems to have corresponded with the installation of exchange server 2003 sp2. What do I need to do to correct this?

All Replies

  • Thursday, September 14, 2006 3:47 PM
     
     
    If you can do this with any users' mailbox, I'd start by checking the items in KB article 821897 (http://support.microsoft.com/kb/821897/). My guess would be that either someone explicitly granted permissions, or you have some excess permissions in the Exchange Domain Servers group.
  • Tuesday, October 03, 2006 6:57 PM
     
     
    If you have Exchange admin rights of View Only or Greater then yes you can. This is the correct function of exchange.
  • Tuesday, June 26, 2007 6:04 PM
     
     
    You need to look at your active directory because the users have too much permisstions, take out exchange admin and domain admin depending on how you did the install for the exchange server.