It just came to my attention that I have a huge email secuirty hole and I was wondering what could be causing it. Right now if any user starts a new email and clicks the To: button. Then right clicks a recipient user that exists on the Exchange store. And selects properties, and clicks the Email Addresses tab, and then selects one of the email aliases assigned to that user. Then they click contacts buttons on the add to section below. This begins to create a contact for the exchange user, if they click on activities tab all the email for the other exchange user is show. Is there a major setting that I have overlooked. I know the mailbox rights set in outlook for everyone are set to anonymous none and default none. Is this a setting that is set for all users of the exchange store? Thanks, Jordan L.