[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


When accessing Outlook Web Access other users mailbox's open without prompting username/passwords

Posted on 2007-10-02
Medium Priority
Last Modified: 2008-10-20
The problem I'm having is that when I log in to any of the spare notebook pc's in our org and try to access Outlook Web Access it automatically opens someone elses mailbox without even prompting for a username and password. Now, I have to mention that all these notbooks use the same shared domain account created for this purpous.  

I also need to mention that despite the use of a secure certificate I also get the following access results::

(When inside the network) using "http" in the browser allows access to OWA too instead of access allowed only using "https" and browser proceeds to open users mailbox without prompting.

(When outside the network) again, both "http" and "https" work and I do get prompted for a username and password thus opening the correct mailbox.

Would anyone know or can help me troubleshoot why other users mailboxes open without prompting me for username and password when accessing OWA internally?

Thanks in advance,
Question by:ekitech
  • 3
  • 2

Accepted Solution

flames1100 earned 2000 total points
ID: 20000840
Someone may have a better way of doing this, but I know you can change security settings on the browser to get the prompt.  Go to Tools, Internet Options, Security tab, Custom Level (probably for Local Intranet), scroll to the bottom and change the last setting to prompt for username and password instead of automatic login.  That should do it.

Expert Comment

ID: 20000850
Sorry...assuming IE.

Author Comment

ID: 20000956
TY for your reply!  Is there any way to do that at the server level so that setting can not be changed by the users?

...also (failed to mention), IE6 and 7 browers, Exchange Server 2003, XP clients

Thanks again!

Assisted Solution

flames1100 earned 2000 total points
ID: 20001135
It appears you can do that with group policy a couple of ways.  You can do it under the Computer Configuration side, under Adminstrative Templates, Windows Components, Internet Explorer, Internet Control Panel, Security Page, Intranet Zone, Logon Options (configure to Prompt for Username and Password).  You can also import it under the User Configuration, but I'm not sure how that works.

Just for the record...I'm not a GPO guru by any means, so if anyone has any comments on doing this, please say so.  Hope this helps, though!

Author Comment

ID: 20001184
Thanks for your help!

Featured Post

Transaction-level recovery for Oracle database

Veeam Explore for Oracle delivers low RTOs and RPOs with agentless transaction log backup and transaction-level recovery of Oracle databases. You can restore the database to a precise point in time, even to a specific transaction.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
Last month Marc Laliberte, WatchGuard’s Senior Threat Analyst, contributed reviewed the three major email authentication anti-phishing technology standards: SPF, DKIM, and DMARC. Learn more in part 2 of the series originally posted in Cyber Defense …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question