I have OWA running (Exchange 2003 on Server 2003R2) and everything seems
to be working, but I have one big security hole that I am sure is caused
by an incorrect setting on my part.
Once users authenticate into their account, they can access any other
account they wish by changing the URL.
perms.
From: Ed Stahr [mailto:est...@pinksneakers.net]
Sent: Tuesday, May 19, 2009 11:40 AM
To: MS-Exchange Admin Issues
Subject: OWA security config problem
I have OWA running (Exchange 2003 on Server 2003R2) and everything seems to be
working, but I have one big security hole that I am sure
-Exchange Admin Issues
Subject: RE: OWA security config problem
Not an OWA thing I don't believe. Bet they can do the same from
Outlook..file open other users folder. Somewhere along the line someone
gave 'everyone' control over the mailboxes. Or a group with odd perms on
all the mailboxesTime
