Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

EWS connections proxied from Exchange Server 2016 to 2010 can access all Exchange Server 2010 mailboxes


View products that this article applies to.

Symptoms

In a Microsoft Exchange Server 2010 and Exchange Server 2016 coexistence environment, when EWS connections are proxied from Exchange Server 2016 to Exchange Server 2010, all mailboxes of Exchange Server 2010 can be accessed without any permission.

↑ Back to the top


Cause

This issue occurs because authentication isn't handled correctly by Exchange Front-End servers.

↑ Back to the top


Resolution

To fix this issue, apply Update Rollup 19 for Exchange Server 2010 Service Pack 3.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


References

Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top


Keywords: all mailboxes of Exchange Server 2010 can be accessed without permission, when EWS connections are proxied from Exchange Server 2016 to Exchange Server 2010, Microsoft Exchange Server 2010 and Exchange Server 2016 coexistence environment, EWS connections proxied from Exchange Server 2016 to 2010, kbsurveynew, kbexpertiseinter, kbfix, kbqfe, kbnotautohotfix

↑ Back to the top

Article Info
Article ID : 4054456
Revision : 20
Created on : 7/30/2020
Published on : 7/30/2020
Exists online : False
Views : 232