Someone has probably delegated "everyone" full exchange administrator rights, or given "everyone" read mailbox on the store. What you describe does not happen here or in my test environment. -----Original Message----- From: webmaster@xxxxxxxxxxxxxxxx [mailto:webmaster@xxxxxxxxxxxxxxxx] Sent: Wednesday, April 06, 2005 11:29 AM To: [ExchangeList] Subject: [exchangelist] Outlook and Exchange Mailbox Security http://www.MSExchange.org/ It just came to my attention that I have a huge email secuirty hole and I was wondering what could be causing it. Right now if any user starts a new email and clicks the To: button. Then right clicks a recipient user that exists on the Exchange store. And selects properties, and clicks the Email Addresses tab, and then selects one of the email aliases assigned to that user. Then they click contacts buttons on the add to section below. This begins to create a contact for the exchange user, if they click on activities tab all the email for the other exchange user is show. Is there a major setting that I have overlooked. I know the mailbox rights set in outlook for everyone are set to anonymous none and default none. Is this a setting that is set for all users of the exchange store? Thanks, Jordan L. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: michael@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx