HelloI've run into a problem setting up an Exchange server standard 2000 with Outlook Web Access.User that log on to http:\ipadress\exchange\ have access to all mailboxes on the server.They can easily access another users mailbox by typing in http:\ipadress\exchange\username , without having that users password.This ofcourse is a big problem, since we're not interested in having users seeing each others mailboxes. I realize this probably is a problem with permissions in IIS, but I'm not sure where to start.Regards Loftus

Its probably more of a permission in active directory. Get adsiedit out and have a look under the configuration container\ exchange\first storage group. Maybe this will help. http://support.microsoft.com/default.aspx/kb/313807 If your not familiar with adsiedit, i would reccommend getting on the phone with PSS.

I don't know why i didn't think of this first but run an exbpa (exchange best practices analyzer...free tool from MS) permissions check against your exchange servers. It should tell you exactly whats wrong.

Thanks for all help. I managed to find a solution to my problem here: http://groups.google.no/group/microsoft.public.exchange2000.setup.installation/browse_thread/thread/dca8dafb4bc26da9/cda5baf40ad1a43b?lnk=st&q=%22integrated+windows+authentication%22+%22all+mailboxes%22&rnum=1#cda5baf40ad1a43b It seems to work turning off the Integrated windows authentication, and setting a default domain.