One of our contractors said that by default, it was possible for anyone to connect to the powershell instance of a CAS server and do an Export-mailbox (or similar command)
Can anyone tell me if this is correct, how it's accomplished, and how I can disable this functionality?
Several users on a multi tenant system will be leaving our company. A contractor has been hired to facilitate the migration.
It's OK that people have access to OSTs and regular email but I don't want the contractor doing a bulk export of data without our coordination. I overheard them discussing how they will need each user's password to accomplish the export. I'm concerned if they proceed a bulk export will occur, causing contention on internet circuits and disk IO.