Out of office notification for external emails

[AccUser]

I have this situation. If I put the Out-of-Office on, internal clients will receive the notification that I am out. But external email clients do not receive this notification.

I contacted MS support and went through my settings on Exchange 5.5 and everything looks ok.

Any answers?

Thanks in advance.

Accuser

 

[AccUser]

Never mind - in going through the messages, I came across the setting (IMS, Advanced Options, removed checkmark from 'Disable Out of Office from the Internet'.

Thanks for your posting.

 

[TimK01]

I believe allowing out of office messages to the internet is considered a security risk. Ive never understood why tho

 

[AccUser]

Guess I'll have to pose the question to MS and see if they bite, unless anyone out there knows.

...

 

[byteya]

Here is why some see this as a security risk: Say my out-of-office message says, "Hi, I won't be able to respond to your email now because I'm in sunny florida for a training seminar."

As an outsider I now know a person's name, email, and know that he is out of the state. I call up the company's help desk and say, yeah, this is Bob and I'm in Florida at training, but need to dial-in to get at some customer information, and I can't get my password to work. Can you reset it for me?

Now, this is only one way to look at it as a security risk, I'm sure there are many other senarios that also could happen depending on how your company is structured. Again, this is only my view, but it was covered in a security class I took.

*J*

 

[AccUser]

I agree that this would pose under normal circumstances, but in my case, no user knows anyone else's password. On top of that, we have a small user community (only about 50 users). In addition, our IT group is a 2-man operation and we decide who has dial-in permissions and who don't. If we received a call from someone claiming to be someone else (which would be kind of hard because we would recognize the voice), we still would not give out the pw, but would request the caller what pw they are using. It's more like a screening process that we always go through when we set a user for dial-in, but I appreciate your thoughts on this subject.

A