OWA question

[hchman]

WE are working on setting up inernet access to our outlook. We are in the testing phase and have found that anyone that knows the administrator username and password can access other users emails in outlook from our exchange web site. Is there a way to prevent this?

 

[cq]

That is the correct behaviour. Why are you giving people the admin name and password if you don't want them to have admin rights?

Pete

 

[quell]

1. is exchange useing this account to get email? if not
2. change administrator password
3. change admin privlegde in exchange
4. give users log on locally priv.

 

[bygbyrd]

At the site level, change the Administrators role from Service Account Admin to Permissions Admin. Any one who has Service Account Admin can access any one's mailbox. Permissions Admin will allow you to do all other administration using Exchange Admin, except access to all the mailboxes.

Recommendation: Create a separate group for Exchange Admins and add necessary people to it instead of using the Domain Admins group.