Outlook 2003 and Exchange Server 2003

[faza]

I have an exchange server 2003 and clients Outlook 2003. One of the users noticed yesterday that if they go to File and Open then Other users files and type in a member of staff, they are able to access their inbox, calendar and basically all outlook items.

 

Can this be stopped ?

 

Hope someone can help as this is a Major Security Issue

 

steve

[ChrisH]

Somebody must have been messing with the permissions somewhere as I cant do that here. You must specifically give other people permission as by default not even the administrator can open other peoples mailboxes.

Im pretty sure thats true and seems to be true here but Exchange is not my best area

[faza]

Ok thanks

[indiegirl]

I think this can be set higher, but I can't remember off the top of my head.

 

Under the individual user in AD, if you browse to user properties, exchange advanced, and then mailbox rights, you'll see the permissions granted. Make sure that the "everyone" option doesn't have full mailbox access rights.

 

If I can find where that lives above (someone else on here may get here before me, mind), then I'll repost.

[faza]

ok thanks indiegirl

[MrDylan]

There's a way to assign access, so presumably remove access, in Exchange System Manager, on the server.

 

Have a look at the security settings on:

 

*****

+Global Settings

+Recepients

-Administrative Groups

- -First Administrative Group

- - -Servers

- - - -SERVERNAME

- - - - -First Storage Group

- - - - - -Mailbox Store (SERVERNAME)

 

Check the security settings on that, and the 'Mailboxes' folder and see if they corrispond to the issues you're having.

[NetworkGeezer]

There are two ways of allowing access to mailboxes in the Exchange world:

via the AD Computers and Users console (which should hopefully be quite secure) or via Outlook folder sharing.

 

Maybe somebody was experimenting with their Outlook configuration and left themselves wide open to attack.

 

If more than one mailbox has ben compromised then it might a problem higher up the geek chain

[randyrr]

i have a small office (15 pcs) and need to setup MS Outlook 2003 to send and receive mail...I want each user to be able to send/receive mail, calendar etc...how can i set up Outlook on the network?

[Edu-IT]

Do you have your own Exhange server?

[randyrr]

Hey Thanks for responding Edu-IT

 

no, i don't have Exchange server setup

 

What are the steps i need to do...?