RE: Soka|OWA 2003|Change Password feature

  • From: "Booker T. Washington" <chipw@xxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 17 Feb 2006 18:03:07 -0500

[exchangelist] RE: Setting Number of Recipient Limits for Large Groups of 
UsersI am experiencing a problem when my users try to change their password via 
OWA, recently, they receive a Object required error message.
I have not fully read this yet

but if anyone has any ideas, let me know


  ----- Original Message ----- 
  From: Maglinger, Paul 
  To: [ExchangeList] 
  Sent: Friday, February 17, 2006 4:21 PM
  Subject: [exchangelist] RE: Soka|OWA 2003|Change Password feature

  Why would "User A" know "User B"'s password?  That's your security problem.

  From: Robert Lawson [mailto:rlawson@xxxxxxxx] 
  Sent: Friday, February 17, 2006 15:09
  To: [ExchangeList]
  Subject: Soka|OWA 2003|Change Password feature

  Hello All,

  We are looking at the OWA 2003 "Change Password" feature for our production 
environment.   The odd thing is it allows "User A" to change the password of 
"User B", if "User B"'s password is known by "User A".  This seems to be a 
security loophole we don't want to open.  Is anyone using the "Change Password" 
feature that can share their experiences?

    We are Exchange 2003 SP1 Enterprise shop.  1FE/2BE configuration.

  Thanks, Robert


  Robert Lawson

  Senior Database Administrator/email administrator

  Soka University of America

  1 University Drive

  Aliso Viejo, CA. 92656  USA

  main: 949.480.4000 fax: 949.480.4258

  direct: 949.480.4224 rlawson@xxxxxxxx 

  List Archives:
  Exchange Newsletters: 
  Visit for more information about our other sites:
  You are currently subscribed to this Discussion List as: 
  To unsubscribe visit
  Report abuse to info@xxxxxxxxxxxxxx 

Other related posts: