---
type: source
title: "URZ: Unauthorized Account Access"
tags: [email-security, privacy, spyware, university-policy]
related: [unauthorized-email-clients, e-mail-sicherheit, data-privacy-compliance]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_e_mail_e_mail_sicherheit_unbefugte_accoun.md"]
---

# URZ: Unauthorized Account Access

This source documents the Universitätsrechenzentrum (URZ) policy and technical warnings regarding the use of specific third-party email clients that are classified as spyware.

## Key Warnings
The URZ identifies several email programs that exfiltrate user credentials and copy entire mailboxes to external provider servers, routing all traffic through their own infrastructure. This is considered a violation of § 6 Abs. 2 Satz 4 of the URZ regulations.

### Prohibited Clients
- **Outlook** (Exception: Office LTSC Campus License version)
- **Edison Mail+**
- **E-Mail - Schnelle Mail**
- **bluemail**

## Remediation Workflow
If a user is notified by the URZ of a security issue related to unauthorized access, the following steps are required:
1. **Remove Account**: Delete the university mail account from any prohibited email programs.
2. **Check VPNs**: If no prohibited clients are used, check for antivirus software with integrated VPN functions (e.g., **Norton Anti-Virus**) and disable the VPN during email retrieval.
3. **Reset Password**: Change the account password via the central account management system.
4. **Switch Clients**: Transition to a URZ-recommended email program.

## Monitoring
The URZ actively monitors email log data to detect patterns associated with these unauthorized clients to protect the university's IT infrastructure.