The company I work for is a high school. Currently we have only been giving e-mail addresses to Faculty and Staff, but today I've been asked if Students can also start having an exchange mailbox. Our students are VERY savy and if there is a way for them to exploit something it will only be a matter of time before they figure it out :)
My first concern is them sending out SPAM mail. Our Exchange server is setup that outgoing mail can only be sent via authorized ( AD credential ) users, but students will be authorized users. Whats the best way for me to keep something like this from happening?