Direct Mailer User Password Is Saved to Text File on Public Share

When you create a Direct Mailing and set it up as a scheduled task, it writes a text file to the hard drive in a directory that is on a network share called \\server\TMLBQueue. As part of setting up the schedule, a Windows NT domain name and password are designated for the scheduled task to run under. The user password can be viewed in the text file because the default permissions on the share are set to Everyone - Full Control.

To resolve this problem, place the appropriate permissions on the TMLBQueue share.

Microsoft has confirmed that this is a problem in Microsoft Site Server 3.0.