I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
Here's our problem, users who want to change their password trough OWA get this error "The password you entered doesn't meet the minimum security requirements.", even if users are respecting the ...
Once i've logged into my work OWA, i've found i can access any other staff members mailbox simply by changing my username to theirs in the web address box! How do i turn off this scary 'feature'??? ...