Our original e-mail environment was upgraded to Exchange from Lotus around 6 years ago, and we have some users that actually have LegacyExchangeDN's different from their SMTP address (mine included), and have been able to see all my mailboxes. I realize this isn't much help, but it's very strange.