Outlook Web Access

Display Alert Message at Logoff Time

If an Outlook Web Access user walks away from their computer and leaves their web browser open, it is possible for an unauthorized person to use authentication credentials in the browser's cache to access the mailbox. When the WarnOnLogoff registry key is added, users will receive a pop-up warning message whenever they navigate away from Outlook Web Access. The message will notify users that if they close their browser window or go to another Web site without first logging off from Outlook Web Access, their mailbox may be compromised.

Keep in mind that once this registry key is activated, users will also see this message whenver they refresh their browsers (such has by hitting F5 on their keyboards).

Warning    Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it, and you should also update your Emergency Repair Disk (ERD).

To enable logoff alert messages:

  1. Stop the W3WSVC service. On the Start menu, point to Program Files, point to Administrative Tools, and then click Services. Right-click World Wide Web Publishing Service (W3SVC), click Stop, and then click OK.
  2. On the Start menu, click Run, type Regedt32.exe, and then click OK.
  3. In Registry Editor, under HKEY_LOCAL_MACHINE on Local Machine, go to SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA.
  4. On the Edit menu, select Add Value.
  5. In Add Value, type WarnOnLogoff as the value name, select REG_DWORD as the data type, and then click OK.
  6. In DWORD Editor, type 1 in the Data field. To disable logoff alert messages, type 0.
  7. Restart the W3WSVC service. On the Start menu, point to Program Files, Administrative Tools, and then click Services. Right-click World Wide Web Publishing Service (W3SVC), click Restart, and then click OK.