Security

Ask something
Discussion Locked

outlook 200 with microsoft exchange

0 helpful
2 replies

by kahless1972 3 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a question.We are trying to set up an echange server that will allow our user's to utilize Outlook 2000.We are using citrix metaframe to authenticate to the server.Our Problem is when we try to prevent a user from entering a Known user name and then logs on to the server with HIs/her own Password and user name they can get the email from the other person.Any ideas that will prevent the user from being able to access emails that are not their own?

2 replies

by talleywho

Not sure about this, but have something you may want to keep your eye on. My company allows Outlook access via Citrix, and I found a pretty nasty security flaw. Here's what I found.

1) Open outlook and create a new email.
2) in the body of the email make a link to a fake network location (one that does NOT exist) ex. \\servername\fakefoler\
3) what happens for me is errors are thrown and i am allowed complete remote access to the server's desktop. kinda scary, keep your eye on this.

by paulb

I administer a Citrix farm with outlook/exchange and was not able to recreate your conditions... It may be specific to a Citrix version.

I use Metaframe XPe for Win2k SP2FR2 with all current hotfixes.

Would like to help out but you provided limited info.

This discussion is closed to new replies.