Exchange Server Forums

Why is one user accessing another user's mailbox?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Why is one user accessing another user's mailbox?

Page: [1]

Message

<< Older Topic Newer Topic >>

Why is one user accessing another user's mailbox? - 12.Jun.2008 11:21:10 PM

htt

Posts: 6
Joined: 12.Jun.2008
Status: offline

Hi,
First I am not exchange guy; all I know is very basic. In System Manager I see user1's mailbox with last logged on by user2. I tried to log in as user2 but won't be able to open user1's Inbox. What does it mean in System Manager when I see that? In the even log it logged event 1016 with Windows 2000 User domain\user2 logged on to user1@domain.com mailbox, and is not the primary Windows 2000 account on this mailbox.

This is Exchange 2003. Thanks.

Post #: 1

Featured Links*

RE: Why is one user accessing another user's mailbox? - 13.Jun.2008 9:57:34 AM

uemurad

Posts: 5146
Joined: 7.Jan.2004
From: California, USA
Status: offline

I'm not entirely sure what your question is, but all it takes for the ESM to display a different account as last to log in is a calendar appointment or even just a peek at the free/busy information .

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to htt)

Post #: 2

RE: Why is one user accessing another user's mailbox? - 13.Jun.2008 10:54:16 AM

htt

Posts: 6
Joined: 12.Jun.2008
Status: offline

questions:

why user2 logged into user1's mailbox?
should I concern about this?
is there a tool to see what is actually happening because I don't want to assume that is the calendar activity when there is a real security breach when user2 is trying to hack into user1's mailbox?

Thanks

(in reply to htt)

Post #: 3

RE: Why is one user accessing another user's mailbox? - 13.Jun.2008 4:08:04 PM

uemurad

Posts: 5146
Joined: 7.Jan.2004
From: California, USA
Status: offline

I'd advise you to step away from the System Manager for a moment. You are overthinking the situation and giving yourself an unnecessary headache.

What shows up there doesn't necessarily reflect what you are assuming. Want proof? Do this...

Look in the ESM and choose a mailbox that doesn't list you as the Last Logged on By object. Go to your Outlook, start a new calendar appointment, select that user as an attendee and wait for the free/busy information to populate. As soon as it does, without sending the appointment, go back to the ESM and refresh that same Mailbox Store view. You'll find your name now prominently displayed as the Last Logged on By object.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to htt)

Post #: 4

RE: Why is one user accessing another user's mailbox? - 13.Jun.2008 7:58:38 PM