Attempting to Remove Additional Mailboxes from Outlook 2010 Fails

I had an issue escalated to me today where a mailbox that had been properly removed from the “Open These Additional Mailboxes” box in the Advanced properties of an Outlook profile did not disappear from Outlook as expected.

We attempted to remove the relevant keys that were still hanging out in:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profile

…and that did not correct the issue, even after a full reboot of the PC.

We then blew away the Outlook profile, permanently deleted everything in   C:\Users\%username%\AppData\Local\Microsoft\Outlook, and recreated the profile. That didn’t work either, so at this point I knew it had to be something on the Exchange server.

I removed the “Full Access” permission using the Exchange Management Console, and then closed and reopened Outlook. Sure enough, the additional mailboxes that were opened were now gone.

Now I’m curious 🙂 So, I go into the Exchange Management Console and add myself to the Full Access list for a resource mailbox I had never connected to or had the occasion to access. I opened up Outlook, and there it was. Funny enough, if I looked in the Advanced properties of my Outlook profile, it did not appear in the list of additional mailboxes to be opened.

Even more curious, I did some digging and found that this is in fact a “feature” of Exchange Server 2010 SP1 when using Outlook 2007 or Outlook 2010:

…which you can see for yourself at http://technet.microsoft.com/en-us/library/bb676551.aspx

I had not yet run in to this “feature,” but found it interesting enough to write about.

Advertisements

About Rebecca Harness

Rebecca Harness is a Business Information Security Officer (BISO) for a publicly-traded, global information solutions company. As BISO, she champions security initiatives and recommends strategies to mitigate risk, facilitating innovation and new product development. She’s also responsible for representing the business unit’s security program in client facing engagements, conferences, and industry forums. Prior to her current role, she was an influential cybersecurity leader for one of the world’s largest transportation providers, known for transforming information security efforts into well-orchestrated programs. There, she developed an innovative methodology for delivering key information security priorities as a service model, leading to quicker adoption enterprise-wide while significantly reducing operational costs. She also led and modernized their global, multi-brand PCI Assessment and other compliance initiatives. In the early 2000’s, Rebecca developed one of St. Louis' leading Managed Services Providers from a startup in a spare bedroom into a mature consulting company with 30+ employees and 150+ clients in the Greater St. Louis Area. Rebecca holds many certifications, including; ISACA Certified Information Systems Auditor (CISA); ISC2 Certified Information Systems Security Professional (CISSP); and GIAC Security Leadership Certified (GSLC). She’s also a proud alumni of Hastings College and a longtime member of the Society of American Magicians.

No comments yet... Be the first to leave a reply!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s