Why is one user accessing another user's mailbox? (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message

htt -> Why is one user accessing another user's mailbox? (12.Jun.2008 11:21:10 PM)

Hi,
First I am not exchange guy; all I know is very basic.  In System Manager I see user1's mailbox with last logged on by user2.  I tried to log in as user2 but won't be able to open user1's Inbox.  What does it mean in System Manager when I see that?  In the even log it logged event 1016 with Windows 2000 User domain\user2 logged on to user1@domain.com mailbox, and is not the primary Windows 2000 account on this mailbox.
 
This is Exchange 2003.  Thanks.



uemurad -> RE: Why is one user accessing another user's mailbox? (13.Jun.2008 9:57:34 AM)

I'm not entirely sure what your question is, but all it takes for the ESM to display a different account as last to log in is a calendar appointment or even just a peek at the free/busy information .



htt -> RE: Why is one user accessing another user's mailbox? (13.Jun.2008 10:54:16 AM)

questions:
  • why user2 logged into user1's mailbox?
  • should I concern about this?
  • is there a tool to see what is actually happening because I don't want to assume that is the calendar activity when there is a real security breach when user2 is trying to hack into user1's mailbox?

Thanks



uemurad -> RE: Why is one user accessing another user's mailbox? (13.Jun.2008 4:08:04 PM)

I'd advise you to step away from the System Manager for a moment.  You are overthinking the situation and giving yourself an unnecessary headache.

What shows up there doesn't necessarily reflect what you are assuming.  Want proof?  Do this...

Look in the ESM and choose a mailbox that doesn't list you as the Last Logged on By object.  Go to your Outlook, start a new calendar appointment, select that user as an attendee and wait for the free/busy information to populate.  As soon as it does, without sending the appointment, go back to the ESM and refresh that same Mailbox Store view.  You'll find your name now prominently displayed as the Last Logged on By object.



htt -> RE: Why is one user accessing another user's mailbox? (13.Jun.2008 7:58:38 PM)

Thanks!



Page: [1]