After the first OWA login I can login to ANYONES MAILBOX!!!!!!! Wh

From: Labuiacs (Lindsay.Prince_at_reedholm.com)
Date: 01/07/05

  • Next message: Tim Hackbart [MSFT]: "Re: After the first OWA login I can login to ANYONES MAILBOX!!!!!!! Wh" 
    Date: Fri, 7 Jan 2005 11:13:05 -0800

    I am running OWA 5.5 with ISS5 on a Win2K box...
    After the first login prompt, (username, password) i get the OWA login page
    where I type in my mail box so on and so on. But i have recently discovered
    that with any login and password I enter, I can access anyone's Exahange mail
    box. This is very upsetting, Please tell me that I'm doing something wrong,
    so I can fix it. If OWA allows this then I must remove it from my sever ASAP.

    Thank you for your help... 

    -- 
-- Lindsay Prince
  • Next message: Tim Hackbart [MSFT]: "Re: After the first OWA login I can login to ANYONES MAILBOX!!!!!!! Wh"

    Relevant Pages

    • Re: OWA Login
      ... > were able to logon to OWA using a username only on the ... > forms based owa login page. ... you insist on being able to login simply by typing username, ...
      (microsoft.public.exchange.clients)
    • Re: After the first OWA login I can login to ANYONES MAILBOX!!!!!!! Wh
      ... > After the first login prompt, (username, password) i get the OWA ...
      (microsoft.public.exchange2000.clients)
    • OWA login after mailbox move
      ... After moving 25 users from one Exchange server to a new Exchange server ... OWA login only works with: ... Login dialogue box appears and login is successful ...
      (microsoft.public.exchange2000.clients)
    • OWA login after mailbox move
      ... After moving 25 users from one Exchange server to a new Exchange server ... OWA login only works with: ... Login dialogue box appears and login is successful ...
      (microsoft.public.exchange.clients)
    • Forms based authentication.
      ... forms based authentication, the OWA login page requires the user to either ... the possible logon formats which can be used or is there something I haven't ...
      (microsoft.public.exchange.admin)