There is a user with administrative privileges that logs into their Exchange 2003 account (we will call them user1). When that user logs in it show up in the application logs as a totally different username with 1009 and 1016 events (they show up in the logs as user2). Also when that user tries to access another account's inbox, sent items or calendar, it shows up as another user in the application logs (they show up as user2 and not user1, which is their correct logon to the domain).
In the properties of the exchange server in exchange system manager under diagnostics logging. I have both the "logons" and the "access control" logging set to maximum under the MsExchangeIS/Mailbox properties.
With all of this said Microsoft and I did some troubleshooting and made up a test account with email. We went into the security tab under the account settings (not the mailbox rights under exchange settings) and removed the username that the administrative user (user1) keeps showing up as when they log on in the application logs (so I removed the user2's access to that account). Now mind you that user1 under the securty tab had full access to the test mailbox because they have admin rights. I can log into a server with that persons logon (user1's login), but when I try to access that test email account. They are denied access and cannot log into the account thru outlook.
I am not sure what is going on here, but it does not seem right. Any help or direction would be most appreciated.
Update:
I am going to get back in touch with MS and see if users are able to set up account impersonation in exchange 2003. I know it can be done in exchange 2007.
Start Free Trial
