Exchange Server Forums

Problem with delegate forwarding a meeting request

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Problem with delegate forwarding a meeting request

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Problem with delegate forwarding a meeting request - 9.Apr.2008 10:01:33 AM

eddie_f

Posts: 1
Joined: 9.Apr.2008
Status: offline

I've found some strange behaviour on our Exchange 2003 server. Here is the scenario: There are three mailboxes, "Boss", "Assistant", and "George". Assistant is a delegate of Boss and receives all meeting invitations sent to Boss. George sends Boss a meeting request. Assistant, who is not so great at using computers, wants to propose a new time for the meeting, but apparently doesn't know how to use the "Propose new time" function. Instead, Assistant forwards the meeting request back to George asking for a new time.

George receives the forwarded message from Assistant, but in George's inbox, the message appears to be from himself. Opening the message shows that it was sent from Assistant "on behalf of" George. Assistant is not a delegate for George's mailbox. I was able to duplicate this scenario with three test accounts.

Does anyone know why a forwarded meeting request would appear to be sent from the orginal person instead of the person who actually sent it? I don't really see this as a big security flaw, but to an untrained person, it does make it look like a user can send messages that appear to be from someone else.