Once you are logged into OWA you can type other users' names into the url and access their mailboxes. This seems to have corresponded with the installation of exchange server 2003 sp2. What do I need to do to correct this?
If you can do this with any users' mailbox, I'd start by checking the items in KB article 821897 (http://support.microsoft.com/kb/821897/). My guess would be that either someone explicitly granted permissions, or you have some excess permissions in the Exchange Domain Servers group.
You need to look at your active directory because the users have too much permisstions, take out exchange admin and domain admin depending on how you did the install for the exchange server.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.