When some of our users are out of office they receive a message box asking if they want to: "Allow this website to configure Not_my_username@mydomain.com server settings?"

Why would it ask to configure server settings for a user other than their own?