Reading Outlook2003 email without password

[Nathan]

At my company we use shared machines where multiple people check their email.
They are logged into windows using the same generic windows ID, but have
different Email account on an exchange server.

Problem: When you close Outlook and reopen it, you can read any sent mail
without entering a password (Just cancel the password box that pops up at
startup and you still have access to the mail folders). This enables user A
to view the email from user B who checked their mail last.

I have tried passwording the pst and have not saved any passwords. Is this
behavior by design or is there any way to have Outlook ask for a
user/password before you can do anything?

 

[Brian Tillman [MVP - Outlook]]

At my company we use shared machines where multiple people check their
email.
They are logged into windows using the same generic windows ID, but have
different Email account on an exchange server.

Problem: When you close Outlook and reopen it, you can read any sent mail
without entering a password (Just cancel the password box that pops up at
startup and you still have access to the mail folders). This enables user
A
to view the email from user B who checked their mail last.

I have tried passwording the pst and have not saved any passwords. Is
this
behavior by design or is there any way to have Outlook ask for a
user/password before you can do anything?

I suspect it's not the PST but the OST you can examine. Disable Cached
Exchange mode and delete the OST. No one will be able to see your mail then
because they're have to log into Exchange to see it.

The best bet is for each of you to have your own Windows account.

 

[Nathan Polakos]

We had a simmilar issue at my company. Unfortunatly disabling Cache was not
an option due to the large increase in network traffic as well as server
loads. Also, due to some distributed processing we do the option having
users login under their own accounts was also out the window.

My solution was to write a c# program that encapsulated the outlook program
and managed the profiles itself. It copies and encrypts the files for a
profile to a folder outlook doesnt know about. When someone runs my program
(SecureOL Launcher) it gives them an option about what profile they want to
use. It asks for a password which it authenticates against the domain before
fetching their files to the location outlook expects them, decryps them, and
preps the registry. It then launches outlook and drops itself to the
taskbar. When the user quits outlook it encrypts their files and the cylce
can start over. If you (or anyone) is still having this issue I would be
happy to post the c#.net project for them. It would probably take some
tweaking to make it work at your company, but with some basic programming
knowledge you can have it running in an hour or so. (ie. change definitions
for the domain etc.)

This is not a bulletproof solution, but makes it difficult for anyone to
read another users email without really hacking away at it.

Anyway, if anyone is interested just ask and I will post the code