Web Based Outlook Security Issue

[june1980]

We're running Exchange 2k with the latest service pack.

The issue is that, and this is only on a our Windows XP machines, whenever someone ends a web based outlook session by logging out or just closing IE, the server doesn't ask for a username or password when a user goes back to check mail - it goes directly to the last user's mail box. It's like it saved the username and password settings somewhere and I can't find a way to change that. I've deleted temp files and cookies, but that didn't help.

In short, I need to make exchange's web access ask for a password EVERY time a user hits that page. I don't want an saved passwords or settings. Any ideas?

THanks in advanced.

 

[jpederson]

Don't know why it would be an issue only on XP

In OWA the browser caches the http session which contains a hash of the credentials used to authenticate. To clear the cache ALL browser windows must be closed or else you will see the behavior you have described.

Hope this helps