Home > Ask the Microsoft Exchange Experts > Richard Luckett: Spam and Security Questions & Answers > E-mail message privacy concerns
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

E-mail message privacy concerns

Richard Luckett EXPERT RESPONSE FROM: Richard Luckett

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 22 September 2004
Is it possible for a network administrator to view my e-mail messages (without my permission) if I am logged in myself and they remote into my PC for problems?

>
Based on the question I think that you might prefer to hear me say "unequivocally no." However, there is more at play here than whether or not you gave them permissions or even if they were able to remote into your machine with full administrator rights.

In order for anyone to access mail in your mailbox on an Exchange server, they would essentially have to be logged on as you or with an account that has the same permissions to your mail as you do. But someone other than you could grant the necessary permissions. For Exchange 2000 and 2003, an Exchange administrator could create an administrative account that has permissions to all mailboxes on an Exchange server (see KB268754 and KB262054 at http://support.microsoft.com). Once logged on as that account, they could access all mailboxes in the organization from their own machine. If your mailbox resides on an Exchange 5.5 server, then there is an account by default that has rights to every mailbox and that account is called the Exchange Service Account.

What it boils down to is the privacy policy in your company. Many corporations, government agencies, internet service providers and educational institutes have very different views and policies on the privacy of e-mail. These policies should dictate what administrators can and cannot do when they are administering your machine. In my own experience as an Exchange administrator, even when there is not a formal policy, I have always asked for consent from legal services prior to responding to any request to gather or view mail for a particular user. I hope that your administrators would be as scrupulous.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Richard Luckett: Spam and Security
How effective is tracking the IP address of an email hacker?
Why can't I grant users permissions to an Exchange public folder?
How can I configure Exchange IMF to allow an IP address or DNS?
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Tool helps identify inbound Exchange Server email flow issues
Why does a security alert pop up when accessing Outlook Web Access?
Exchange email sent to a domain using SPF authentication is returned
Configure SMTP relay restrictions in Exchange Server 2003 to stop spam
How to lock down an SMTP relay to prevent spam in Exchange Server 2003
Selectively set email permissions for Exchange groups

Microsoft Exchange Server Password Management
Lock down direct file access and protect OWA users
Configure a POP3 connector to receive external email on SBS 2003
Manage user rights and access to Outlook Web Access (OWA) mailboxes
Unsecured devices worry IT professionals
Protecting Outlook Web Access from keystroke loggers
Creating one password for both local and Microsoft Outlook user accounts
'Error: Domain not available' after password change
Multiple new Sober variants spy on passwords
Securing Exchange mailboxes from internal attacks
Password prompt when attempting to view a replicated public folder

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Outlook Web Access (OWA) Tips and Advice
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts