OWA Security Question
Hello, If you are logged on to OWA as a user with the appropriate permissions is it possible to give yourself access to another user's mailbox? For example if you logged on as Administrator could you then gain access to the mailbox for "Mr Some User" ? I would also like to know if there is any way to modify Active Directory through the OWA connector whether it be through the interface or using a third-party application. In this instance I'm wondering if it is possible to create or modify a user. I do realise the instant answer is "no" but please keep in mind that I am talking about you logging on as a user that would have full access and ability to do these things if you were logged on to a physical machine normally. Thanks
November 26th, 2010 6:38am

Hi Luke, If you pre-grant the permissions to an administrator account on those mailboxes, then sure it is possible to access other user's mailboxes. In OWA Premium you drop down on the name, in the top right, and choose "Open Other User's Inbox". You can't login to OWA and grant yourself permissions over a user's mailbox direct from OWA< even if the user you are logging in as could do that in the Exchange Management Console. It's not possible using OWA to create a new user. There are changes in Exchange 2010 that enable some of the functionality you want, like user modification, via the Exchange Control Panel web application. SteveSteve Goodman Check out my Blog for more Exchange info or find me on Twitter
Free Windows Admin Tool Kit Click here and download it now
November 26th, 2010 7:57am

Hello, Agree with Steve. For your first question, you can follow this document to achieve the goal: How to Enable Explicit Logons in Outlook Web Access http://technet.microsoft.com/en-us/library/aa998830(EXCHG.80).aspx The second question: Based on my experience, it is impossible to modify Active Directory through the OWA. Best Regards, EvanPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 29th, 2010 10:36am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics