Petri.com forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Messaging Software > Outlook
Petri.com is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Removing 'From' Field in Outlook 2003 - Inpersonating Users!

Removing 'From' Field in Outlook 2003 - Inpersonating Users!

this thread has 7 replies and has been viewed 15168 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 11th December 2008, 18:28
Anonners Anonners is offline
Casual
Casual
 
 Join Date: Jun 2008
  6 month star 12 month star
 Posts: 14
 Reputation: Anonners is on a distinguished road (10)
Exclamation Removing 'From' Field in Outlook 2003 - Inpersonating Users!

Afternoon all!

This may sound like a relatively easy problem, but I cannot find anything on the Internet in regards to this! So I hope someone might've come across this before and could shed some light on the matter

We currently run Exchange 2000 with Outlook 2003 with approximately 180 users. The 'From:' field does not appear when composing a new mail, however it does appear when you reply to a mail.

We have found that you can remove the name (the name of the user composing the reply) from the 'From:' box and replace it with another username on the system ... Once the e-mail has been sent, it appears to have come from the username typed in!

Therefore you can send a message posing as someone else, which could get a bit messy! Eek!

Is there anyway to turn the 'From:' field off for all users? Will we have to go round per machine and remove the 'From:' box? Although that wouldn't stop the user re-applying the 'From:' field and having a bit of fun?

Hmmm!

Any ideas? Any information is much appreciated!

Thanks,

Kris
  #2  
Old 11th December 2008, 18:51
joeqwerty's Avatar
joeqwerty joeqwerty is offline
Moderator
 
 Join Date: Jul 2007
  6 month star 12 month star
 Posts: 4,874
 Reputation: joeqwerty is a splendid one to beholdjoeqwerty is a splendid one to beholdjoeqwerty is a splendid one to beholdjoeqwerty is a splendid one to beholdjoeqwerty is a splendid one to beholdjoeqwerty is a splendid one to behold (678)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

Is this really an issue or are you making it an issue? Users can figure out how to do almost anything they put their minds to. Are looking for all potential loopholes in all the software your users use and trying to block those loopholes? Do you have users who are doing this? It seems that a good AUP and enforcement policy should do the trick in stopping this behavior.

I can drive my car 60mph into a wall if I want to, should the manufacturer design an "anti driving your car fast into a brick wall" feature. Should they remove the gas pedal so that I can't do this.

I can put my head into an oven, should the manufacturer put a "there's a head in the oven" sensor in to stop me from doing this?

My point is that users will always find a way to do something you don't want them to. You can't address every problem with a technical fix.
  #3  
Old 11th December 2008, 18:58
g00ner's Avatar
g00ner g00ner is offline
Junior Member
It's not a coincidence
 
 Join Date: Oct 2008
  6 month star 12 month star
 Location: Cheltenham, UK
 Posts: 123
 Reputation: g00ner is on a distinguished road (38)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

This is from memory, please accept my appologies if it's not 100% right.

In Outlook the From field is only available if Word is being used as it's email editor, to stop this you can force Outlook to use "Outlook", plain text or rich text when composing,replying or forwarding by using a group policy.

Hope this helps.
__________________
If the information you receive helps please let us know and leave reputation points where appropriate.

The good news about computers is that they do what you tell them to do. The bad news is that they do what you tell them to do. - Ted Nelson
  #4  
Old 11th December 2008, 19:00
gforceindustries's Avatar
gforceindustries gforceindustries is offline
Senior Member
Wrote the book
 
 Join Date: Sep 2008
  6 month star 12 month star
 Location: Leics, UK
 Posts: 4,352
 Reputation: gforceindustries is a jewel in the roughgforceindustries is a jewel in the roughgforceindustries is a jewel in the roughgforceindustries is a jewel in the rough (310)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

I've checked the Group Policy settings for Outlook 2003, and there is no way to disable this through GP. Therefore if you are able to disable it client-side, then your users can easily re-enable this.

As Joe suggested, this is a policy matter rather than a technical matter. I can accidentally delete files from My Documents, therefore we have backups. But I can't accidentally change the sender on an email. That takes a user who is determined to do it, and if you have users who are doing it, then they need to be disciplined. Fire someone for it, and you'll see attitudes change pretty quickly.

Edit: Just seen g00ner's post. You may be able to disable it indirectly.
__________________
Gareth Howells

BSc (Hons), MBCS, MCP, MCDST, ICCE

Any advice is given in good faith and without warranty.

Please give reputation points if somebody has helped you.

"For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

"Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.
  #5  
Old 11th December 2008, 19:07
g00ner's Avatar
g00ner g00ner is offline
Junior Member
It's not a coincidence
 
 Join Date: Oct 2008
  6 month star 12 month star
 Location: Cheltenham, UK
 Posts: 123
 Reputation: g00ner is on a distinguished road (38)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

I've just been looking into this in my lab. You need the Outlook 2003 ADM as per the screenshot.

Edit: This ADM is part of the Office 2003 Resource Kit.
Attached Thumbnails
Click image for larger version

Name:	ScreenShot060.png
Views:	677
Size:	63.1 KB
ID:	2764  
__________________
If the information you receive helps please let us know and leave reputation points where appropriate.

The good news about computers is that they do what you tell them to do. The bad news is that they do what you tell them to do. - Ted Nelson

Last edited by g00ner; 11th December 2008 at 19:09..
  #6  
Old 11th December 2008, 19:10
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
 
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

The most pointed question is "Why are your users allowed to send as other users?" This is not by default so someone has enabled this on purpose.
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375

Quis custodiet ipsos custodes?
  #7  
Old 11th December 2008, 19:11
g00ner's Avatar
g00ner g00ner is offline
Junior Member
It's not a coincidence
 
 Join Date: Oct 2008
  6 month star 12 month star
 Location: Cheltenham, UK
 Posts: 123
 Reputation: g00ner is on a distinguished road (38)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

Quote:
Originally Posted by AndyJG247 View Post
The most pointed question is "Why are your users allowed to send as other users?" This is not by default so someone has enabled this on purpose.

Good point well made!!
__________________
If the information you receive helps please let us know and leave reputation points where appropriate.

The good news about computers is that they do what you tell them to do. The bad news is that they do what you tell them to do. - Ted Nelson
  #8  
Old 11th December 2008, 19:11
uk_network's Avatar
uk_network uk_network is offline
Member
Someone to look up to
 
 Join Date: Sep 2007
  6 month star 12 month star
 Location: UK-North West
 Posts: 704
 Reputation: uk_network has a spectacular aura aboutuk_network has a spectacular aura about (182)
Default Re: Removing 'From' Field in Outlook 2003 - Inpersonating Users!

If you download the office resource kit and add in the outlk11.adm you will get the options there. Check my screen shot.
Might be worth testing this in a lab first.
Attached Thumbnails
Click image for larger version

Name:	ork.JPG
Views:	754
Size:	88.0 KB
ID:	2765  
__________________
Please remember to award reputation points if you have received good advice.
I do tend to think 'outside the box' so others may not always share the same views.

MCITP -W7,
MCSA+Messaging, CCNA in progress.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Removing Exchange 2003 Standard without deleting users Ville Windows Server 2000 / 2003 / 2003 R2 2 12th November 2008 03:04
Outlook 2003 Shared Contacts Not Accessible in To Field dchoban Outlook 13 31st October 2008 16:21
Removing and adding users to Power users group on PC via group policy or script bhavin78 Windows Server 2000 / 2003 / 2003 R2 3 9th July 2008 17:57
Outlook To: field blank after sending Bowema Outlook 0 10th September 2007 22:04
Adding Size Field In Outlook 2000 orlylevy Outlook 0 3rd April 2004 11:29


All times are GMT +3. The time now is 14:58.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri