General discussion

Locked

Exchange - Able to view all users mail

By tomf ·
Greetings,

I am a SysAdmin of several machines, one of our machines was hacked recently. I can now goto the M:\ (Exchange) drive and view ALL the users mailboxes in the MBX directory. On a different system that was not hacked I am unable to viewtheir mail (And rightfully so).

My question is this, how did the hacker open those permissions? How can I reapply the proper permissions, I do not want any admin to view others mail. thanks !

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Exchange - Able to view all users mail

by shmaltz In reply to Exchange - Able to view a ...

If this Server has been upgraded from Exchange 5.5 to Exchange 2000, then it has nothing to do with the cracking (those are not hackers but crackers). Exchange 5.5 by default allowed access for admins to all mailboxes. As an admin you can gain access to any mailbox if you want. If it is only the admin that has access you should not even be worried.

Collapse -

Exchange - Able to view all users mail

by tomf In reply to Exchange - Able to view a ...

The question was auto-closed by TechRepublic

Collapse -

Exchange - Able to view all users mail

by colin In reply to Exchange - Able to view a ...

In exchange system manager drill down to the mailboxes and check the security on the mailbox / storage group. Administrators and domain admins should have a deny on the last two items. this is the default for a fresh E2K install.

Collapse -

Exchange - Able to view all users mail

by tomf In reply to Exchange - Able to view a ...

The question was auto-closed by TechRepublic

Collapse -

Exchange - Able to view all users mail

by tomf In reply to Exchange - Able to view a ...

This question was auto closed due to inactivity

Back to Networks Forum
5 total posts (Page 1 of 1)  

Related Discussions

Hardware Forums