unauthorized sharing of folders in Outlook 2007

[i amtesting]

We are using Exchange 2003, Outllook 2007 in our environment.

Several of our users noticed that many of their folders in Outlook 2007 were
flagged as shared to user accounts with elevated permissions (author or owner
role). These users did not set the folders as shared or set these up to be
shared by other user accounts with the elevated permissions that they have
discovered.

The users with these "unauthorized" shared folders belong to several
Exchange 2003 servers (so these incidents are not only found in one server).
I checked the log files of these servers to see if there is anything related
to these incidents, but could not find any.

In AD users and computers, the security tab of the affected user accounts
did not show any new user accounts being added to get access to their
accounts.

Do you have ideas as to why this happened....and how to prevent it?

Thanks in advance!

i.a.

 

[dlw]

anyone with administrative access could do this

 

[i amtesting]

Thanks, I am aware of that...it is just that the sharing of these users
folders were not done by any of the yss admins, or any of those users from
their own accounts. They did not explicitly share the folders.

The folders appear to have been shared randomly - some users have all
mailbox folders shared to other accounts that they do not even know about;
some users had a few folders shared to other accoutns that they do not know
about either.