Home > Ask the Microsoft Exchange Experts > Bradley Dinerman: Clients and Mobility Questions & Answers > Manage user rights and access to Outlook Web Access (OWA) mailboxes
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Manage user rights and access to Outlook Web Access (OWA) mailboxes

Bradley Dinerman EXPERT RESPONSE FROM: Bradley Dinerman

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 17 December 2008
I am running Exchange Server 2003 on Windows 2003, and am accessing email using Outlook Web Access (OWA). If I type the name of another user's mailbox into my browser (e.g., http://mailserver_ipaddres/exchange/anotheruser_mailbox_name), it gives me access into his OWA mailbox, without prompting me to enter a username and password.

I've tried multiple mailbox names. Each time, I am granted access to the mailbox without a password. How can I prevent this?


>
Changing certain settings in Exchange System Manager can prevent this. Go into the Properties for the mailbox store on which the mailboxes reside. Select the Security tab and verify that you have not given yourself excessive rights to the mailbox. Do the same for the user's account in Active Directory Users and Computers.

Do you have comments on this Ask the Expert Q&A? Let us know.

Ask an Outlook Web Access question in our forum.

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Outlook Web Access
Block Web beacons and protect OWA users from spam
OWA 2007 configuration tricks to boost performance
Top 5 Exchange ActiveSync tips
Lock down direct file access and protect OWA users
Simplify an OWA URL on Windows Server 2008
Windows Mobile 6.5 touts Internet Explorer, OWA improvements
When OWA's default configurations aren't good enough
Digging deeper into Exchange Server 2010
Troubleshoot 'System Attendant' error messages in OWA
Troubleshoot Microsoft Outlook Web Access problems

User Authentication for Microsoft Outlook and OWA
Lock down direct file access and protect OWA users
Obtaining and verifying SSL certificates in Exchange Server
Top 5 Outlook Web Access (OWA) tips of 2008
Create a secure Microsoft Outlook Web Access (OWA) redirect page
Why does a security alert pop up when accessing Outlook Web Access?
OWA won't load after applying Exchange 2007 SP1 security patch
Minimize remote and mobile Outlook Web Access (OWA) security risks
How to improve Outlook Web Access (OWA) security
Alleviate Outlook Web Access (OWA) email attachment security issues
How to customize OWA authentication logon in Exchange Server 2003

Microsoft Exchange Server Password Management
Lock down direct file access and protect OWA users
Configure a POP3 connector to receive external email on SBS 2003
Unsecured devices worry IT professionals
Protecting Outlook Web Access from keystroke loggers
Creating one password for both local and Microsoft Outlook user accounts
'Error: Domain not available' after password change
Multiple new Sober variants spy on passwords
Securing Exchange mailboxes from internal attacks
Password prompt when attempting to view a replicated public folder
Third-party tools to crack Windows passwords

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Vouch by Reference (VBR)  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Outlook Web Access (OWA) Tips and Advice
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy 		  TechTarget - The IT Media ROI Experts