When accessing Outlook Web Access other users mailbox's open without prompting username/passwords

Posted on 2007-10-02
Last Modified: 2008-10-20
The problem I'm having is that when I log in to any of the spare notebook pc's in our org and try to access Outlook Web Access it automatically opens someone elses mailbox without even prompting for a username and password. Now, I have to mention that all these notbooks use the same shared domain account created for this purpous.  

I also need to mention that despite the use of a secure certificate I also get the following access results::

(When inside the network) using "http" in the browser allows access to OWA too instead of access allowed only using "https" and browser proceeds to open users mailbox without prompting.

(When outside the network) again, both "http" and "https" work and I do get prompted for a username and password thus opening the correct mailbox.

Would anyone know or can help me troubleshoot why other users mailboxes open without prompting me for username and password when accessing OWA internally?

Thanks in advance,
Question by:ekitech
    LVL 2

    Accepted Solution

    Someone may have a better way of doing this, but I know you can change security settings on the browser to get the prompt.  Go to Tools, Internet Options, Security tab, Custom Level (probably for Local Intranet), scroll to the bottom and change the last setting to prompt for username and password instead of automatic login.  That should do it.
    LVL 2

    Expert Comment

    Sorry...assuming IE.

    Author Comment

    TY for your reply!  Is there any way to do that at the server level so that setting can not be changed by the users?

    ...also (failed to mention), IE6 and 7 browers, Exchange Server 2003, XP clients

    Thanks again!
    LVL 2

    Assisted Solution

    It appears you can do that with group policy a couple of ways.  You can do it under the Computer Configuration side, under Adminstrative Templates, Windows Components, Internet Explorer, Internet Control Panel, Security Page, Intranet Zone, Logon Options (configure to Prompt for Username and Password).  You can also import it under the User Configuration, but I'm not sure how that works.

    Just for the record...I'm not a GPO guru by any means, so if anyone has any comments on doing this, please say so.  Hope this helps, though!

    Author Comment

    Thanks for your help!

    Featured Post

    Are end users causing IT problems again?

    You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

    Join & Write a Comment

    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now