It seems like a desktop supp. tech created a user account along with a mailbox for a new user that was not supposed to have a mailbox.
The only way i can think of how he could have created the mailbox was if he had Exchnge Sys Mngr tools installed on his PC. If he did, how can I prohibit him from doing it again? He does not have any access to the exchange server at all. How else can a mailbox be created?