Viewing Students Passwords Without Changing Them

[Brad_Sarge]

Hi All,

 

Recently I have been asked to check through some students accounts to see there email. There email password changes automatically through AD so their Log-on password would be the same as the email password. The member of SLT who asked me for this stated that the students cant know it is happening or things could be removed before they can see. Hence why I cant just change there password to view there emails. Is there a way to view the students current password without them knowing (maybe through AD or Exchange)

 

Thanks for any help given.

[Sam_Brown]

You can't see what their passwords are unfortunately as they are encrypted with a non reversible function by default. Believe there are some options around allowing passwords to be stored in a reversible encrypted state but this is definitely not best practice and would create a massive security risk.

 

What I would do is just give myself permissions to access their mail box and add it as an additional mailbox on outlook. Nice and simple and the students would have no idea you had done it.

Edited September 25, 2016 by Sam_Brown

[Brad_Sarge]

Ah that does make sense, just delegate their mailbox to my account temporarily. Dont know why i didn't think of that. Thanks.

[call911]

This is one reason why we generate our students passwords and don't allow them to change it. The main reason is they would change it and then forget it, which made a lot of work on our end to reset it.

 

By setting their password and not letting them change it, we have full control and a master list.

[3s-gtech]

You can give yourself (or another account) permissions to any account via the ECP, then view that mailbox via the dropdown in OWA (may change a little depending on version). Make sure your AUP makes mention of this.

[Blue_Cookeh]

Also if you're worried about them deleting mail, place them on Legal Hold.

[Sephiroth]

Would resetting the password not stop them getting to the mailbox anyway?

[jmak]

Ah that does make sense, just delegate their mailbox to my account temporarily. Dont know why i didn't think of that. Thanks.

Be careful of that. I would make sure that I had written documentation of when and why any students' accounts are accessed and would suggest that while you might facilitate it technically, it's unlikely that it should be you accessing the accounts. As mentioned above, you (or the person taking responsibility) need you ensure its covered in your AUP.