They probably used the domain admin account as the Exchange service account
-----Original Message----- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 1:16 AM To: Exchange Discussions Subject: RE: OWA Administrator can read everyone's email Change back whatever you did to make that happen. That does not happen by default. I suspect that the Domain Admins group has Service Account Admin rights (if you're using Exchange 5.5) or explicit rights on the storage group or database (if you're using Exchange 2000). No group or account except the real service account should have that permission in Exchange 5.5. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of danlavely Sent: Sunday, July 13, 2003 3:09 PM To: Exchange Discussions Subject: OWA Administrator can read everyone's email In OWA, and probably Outlook, too, if you log in as a Domain Admin you can open anyone's mailbox and read their mail. Does anyone know the best way to prevent this? Thanks, Dan. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]