> I have a requirement to have an email account that is so secure that > only the account owner and whomever he decides to share it with know > the password and thus have access to the account. As we currently > have IMail setup, the account admin can get into anyone's account.
In fact, anyone with interactive or SMB access to the user's MBX file has access to the account, since mailbox contents can be transparently relocated. As Terry has suggested, AD/SAM integration offers the possibility of administrative delegation of password control, but this is essentially worthless for locking out all IT personnel. It's just plain foolish to think that some IT person (whether that be the CFO, MIS manager, or sysadmin, or IT people at remote sites) will not be able to access data transmitted over unencrypted SMTP. Depending on his savvy, I wonder how far you could fake it without using PGP/TLS--you could tell him you've switched to Win2K EFS and the NT SAM, and not mention just sniffing the packets off the wire--but you'd surely be faking it. -Sandy To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
