Networks

Ask something
Discussion Locked

Exchange - Able to view all users mail

0 helpful
5 replies

by tomf 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Greetings,

I am a SysAdmin of several machines, one of our machines was hacked recently. I can now goto the M:\ (Exchange) drive and view ALL the users mailboxes in the MBX directory. On a different system that was not hacked I am unable to viewtheir mail (And rightfully so).

My question is this, how did the hacker open those permissions? How can I reapply the proper permissions, I do not want any admin to view others mail. thanks !

5 replies

by shmaltz

If this Server has been upgraded from Exchange 5.5 to Exchange 2000, then it has nothing to do with the cracking (those are not hackers but crackers). Exchange 5.5 by default allowed access for admins to all mailboxes. As an admin you can gain access to any mailbox if you want. If it is only the admin that has access you should not even be worried.

by colin

In exchange system manager drill down to the mailboxes and check the security on the mailbox / storage group. Administrators and domain admins should have a deny on the last two items. this is the default for a fresh E2K install.

This discussion is closed to new replies.