users are able to log to connect to exchange with no password

Posted on 2011-10-05
Last Modified: 2012-05-12
dear experts.
im having a serious problem with my system. im deploying a test environment for exchage 2010. together with outlook 2010. suddenly i discovered something wiered. users who are connecting using Outlook anywhere from windows workstations that are not member of the domain can connect to exchange without a password they just add the server name in the profile and add the http proxy which the OWA site when they click controle name they just get logged in there is no password request like i used to see in exchange 2007, can anybody tell me how this is happening and how to make it ask for a password to authenticate at first time,
Question by:arghosrho
    LVL 5

    Expert Comment

    that should only happen if outlook already knows the password, and has authenticated already once and the user already chose to store the password, otherwise that's pretty much impossible.

    users probably already enter the password when configuring the exchange account, otherwise you can't even add an exchange account, so that's probably why it doesn't ask again.
    LVL 9

    Accepted Solution

    You can delete the store passwords on your workstation
    Go to start->Run->Type Key controlmgr.dll

    Author Comment

    i was actually asking to know if there is something ive done with the server settings that could ve lead to this, is there actually a security setting that can allow users to connect as if they are domain members?
    LVL 5

    Assisted Solution

    users don't need to be domain members in order to connect trough outlook anywhere. however they do need to enter their domain credentials. nothing you can do will allow users to login without a username or password, as that would be pretty stupid from microsoft ... ;-)

    Author Closing Comment

    Has been solved

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Learn more about how the humble email signature can be used as more than just an electronic business card. When used correctly, a signature can easily be tailored for different purposes by different departments within an organization.
    SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now