OWA security config problem

2009-05-19 Thread Ed Stahr
I have OWA running (Exchange 2003 on Server 2003R2) and everything seems to be working, but I have one big security hole that I am sure is caused by an incorrect setting on my part. Once users authenticate into their account, they can access any other account they wish by changing the URL.

RE: owa and ssl cert

2009-05-19 Thread Jay Dale
If you create your own cert, you will have to install it into the Trusted Root Authorities on the PC accessing the site. Unfortunately you would need to do it with every PC that accesses OWA. My suggestion would be to get a 3rd party Trusted cert from someone like RapidSSL or GoDaddy. They

RE: owa and ssl cert

2009-05-19 Thread Scot Parsons
Got mine from https://www.certificatesforexchange.com/. From: Jay Dale [mailto:jd...@xpresstel.com] Sent: Tuesday, May 19, 2009 1:27 PM To: MS-Exchange Admin Issues Subject: RE: owa and ssl cert If you create your own cert, you will have to install it into the Trusted Root Authorities on the PC

RE: owa and ssl cert

2009-05-19 Thread Roger Wright
Yep, cheep and wurks grate. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Scot Parsons [mailto:spars...@scetv.org] Sent: Tuesday, May 19, 2009 1:39 PM To: MS-Exchange Admin Issues Subject: RE: owa and ssl cert Got mine from

RE: OWA security config problem

2009-05-19 Thread Kennedy, Jim
Not an OWA thing I don't believe. Bet they can do the same from Outlook..file open other users folder. Somewhere along the line someone gave 'everyone' control over the mailboxes. Or a group with odd perms on all the mailboxesTime to go into Exchange Manger and review mailbox/sever/store

RE: owa and ssl cert

2009-05-19 Thread David Mazzaccaro
Just installed my GoDaddy SSL cert. Total cost: $67.47 for 3 years, took about 15 minutes to purchase. From: Jay Dale [mailto:jd...@xpresstel.com] Sent: Tuesday, May 19, 2009 1:27 PM To: MS-Exchange Admin Issues Subject: RE: owa and ssl cert If you create

recipient policy and X400 question

2009-05-19 Thread Jason Benway
Is there a way to document/export recipient in exchange 2003 and in a pure exchange 2003 org, do I need X400 addresses on new recipient polices? thanks,jb Jason Benway System/Storage Engineer 616-847-8474 telephone 616-850-1208 fax www.jsjcorp.com http://www.jsjcorp.com/ JSJ

RE: OWA security config problem

2009-05-19 Thread Ed Stahr
Are these the permissions in AdminGroup\Server\Servername and the mailboxstore? Both show Authenticated Users have permissions to Read, Execute, Delete, and Read Permissions. Also, in AD Authenticated Users are shown to have full mailbox access. Any help in changing these setting would

RE: owa and ssl cert

2009-05-19 Thread Paul Everett
Right now I am using OWA without an SSL cert. Do you know if I need one for an i-phone to sync with EAS? I'd just like to get this iphone syncing first and worry about a cert later. From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] Sent:

Updating permissions on PFs - E2k3

2009-05-19 Thread Kurt Buff
All, We're starting the implementation process for the Sunbelt Exchange Archiver, and need to make the service account we've selected an owner on all PFs. This is a bit tricky, for two reasons: 1) We have well over 2,000 PFs - I think it might be closer to 3,000 - and that's just too much to do

RE: owa and ssl cert

2009-05-19 Thread Jay Dale
As far as I know, if you want to do SSL for OWA, so long as the cert is trusted it will work on the Iphone. If you use a home-grown cert, you will have to install it on the iphone for it to work. This is for 2008: http://www.sbstraining.net/post/2009/02/Installing-the-SBS-2008-self-iss

RE: Updating permissions on PFs - E2k3

2009-05-19 Thread Brian Dwyer
Have you tried using PFDAVADMIN you can download from http://www.microsoft.com/downloads/details.aspx?FamilyId=635BE792-D8AD-49E3-ADA4-E2422C0AB424displaylang=en -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, 20 May 2009 4:50 AM To: MS-Exchange Admin

Re: Updating permissions on PFs - E2k3

2009-05-19 Thread Kurt Buff
I have that, but I thought it propagated all permissions in a tree all the way down. I could be wrong on that though. I've got varying permissions on many top-level folders (about 75 of them), and really want to touch each folder individually and add a single owner permission to each. I'll

RE: Updating permissions on PFs - E2k3

2009-05-19 Thread Brian Dwyer
Have a look at what it can do at = http://www.msexchange.org/articles/PFDavAdmin-tool-Part1.html Specifically - Propagate public folder Access Control Entry (ACE) additions, removals and modifications without overwriting the existing Access Control List (ACL). Brian -Original