Outllok 2003: Possible security glitch

[Mark]

Hi

Sorry if this has been done before...

My client is going through the process of upgrading to 2003 (connected to
Exchange Server - not sure which version).

One of my colleagues has found that if he opens Outllook and then closes the
login (userID / password) dialogues by clicking the "x" in the title bar,
Outlook opens offline and provides access to the the users inbox, sent items
etc. It seems the users emails etc. are (optionally perhaps?) being cached
on the local machine

Although it's not possible to send and recieve, it is possible to view the
emails (etc.) and compose new ones which sit in the outbox ready to be sent
(automatically) when the user with the correct login details logs on..

I'm not involved in the upgrade process so I'm afraid I can't give any
really useful technical info. I am surprised however that this is
possible.Obviously there are measures (locking hte PC, passowrd protected
screen savers etc.) which reduce the risk but the fact is, if we are away
from the desktop and the machine is not locked it's possible for someone to
open up outlook offline and have a look at whats been sent and received etc.

After being off-line, exiting and logging back in we remain off-line untill
opting to go back on-line by clicking the status bar menu option etc. At
this point we are challenged for login details. It would be possible (if not
paying attention etc.) to not notice something sitting in the outbox, which
would then automatically be sent.

Is this something we can prevent?

Cheers

Mark

 

[Diane Poremsky [MVP]]

the behavior is expected if you use an offline accessible store. Switch to
classic mode and nothing is visible unless you log on. The only way to
prevent problems is to get into the habit of locking the computer - use the
screensaver with required logon set to a low value if users can't get in the
habit of locking it when walking away from the desk.

 

[Mark]

Thanks Diane

Mark

the behavior is expected if you use an offline accessible store. Switch to
classic mode and nothing is visible unless you log on. The only way to
prevent problems is to get into the habit of locking the computer - use
the screensaver with required logon set to a low value if users can't get
in the habit of locking it when walking away from the desk.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Coauthor, OneNote 2003 for Windows (Visual QuickStart Guide)
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/

Hi

Sorry if this has been done before...

My client is going through the process of upgrading to 2003 (connected to
Exchange Server - not sure which version).

One of my colleagues has found that if he opens Outllook and then closes
the login (userID / password) dialogues by clicking the "x" in the title
bar, Outlook opens offline and provides access to the the users inbox,
sent items etc. It seems the users emails etc. are (optionally perhaps?)
being cached on the local machine

Although it's not possible to send and recieve, it is possible to view
the emails (etc.) and compose new ones which sit in the outbox ready to
be sent (automatically) when the user with the correct login details logs
on..

I'm not involved in the upgrade process so I'm afraid I can't give any
really useful technical info. I am surprised however that this is
possible.Obviously there are measures (locking hte PC, passowrd protected
screen savers etc.) which reduce the risk but the fact is, if we are away
from the desktop and the machine is not locked it's possible for someone
to open up outlook offline and have a look at whats been sent and
received etc.

After being off-line, exiting and logging back in we remain off-line
untill opting to go back on-line by clicking the status bar menu option
etc. At this point we are challenged for login details. It would be
possible (if not paying attention etc.) to not notice something sitting
in the outbox, which would then automatically be sent.

Is this something we can prevent?

Cheers

Mark