Outlook Web Access - Blocking admin account

[tekquest]

Hi all,

I have recently setup outlook web access and its working on http.

I have two questions:

1./ What are the dangers of not running HTTPS to connect to this site
2./ Is it possible to block the administrator account from accessing the mailboxes?

Currently, when you go to the site, a user/password/domain authentication box appears, you enter your domain credentials and then your mailbox alias.

If your admin, you can get all mailboxes!!! this is a concern to me as a few people have this password.

Thanks for reading,

L