Outlook Web Access and Windows 98 Security Issue

[Paddy Ryan]

Hi, I notice that connecting to a mailbox on Exchange 2000 via Outlook Web
Access from a Windows 98 machine is insecure. That is, even if I log out and
close the window, if someone goes back to the OWA link it lets them straight
back into my mailbox and they are not required to log in. This stays like
this until the Windows 98 machine is rebooted.

Any clues?
thanks
paddy

 

[Lanwench [MVP - Exchange]]

Hi, I notice that connecting to a mailbox on Exchange 2000 via
Outlook Web Access from a Windows 98 machine is insecure. That is,
even if I log out and close the window, if someone goes back to the
OWA link it lets them straight back into my mailbox and they are not
required to log in. This stays like this until the Windows 98 machine
is rebooted.

Any clues?
thanks
paddy

Not sure, but a) Windows 98 is not a secure OS by any means and b) OWA is
part of Exchange, not Outlook. Might want to post in m.p.exchange.clients -
also mention your SP level of Exchange & whether you're forcing SSL (which
you should - don't open port 80 into your LAN)