Checklist - Securing Your Exchange Environment

Updated : February 3, 2004

On This Page

How to Use This Checklist
General Security issues
Administrative Group Permissions

How to Use This Checklist

This checklist is a companion to the module, "Securing Your Exchange Environment." Use it to help you to secure your Microsoft Exchange 2000 servers, or as a quick reference for the corresponding module. This checklist should develop as you discover steps that help you to implement your secure Exchange organization.

General Security issues

Check

Description

 

All unnecessary services disabled.

 

Schema Admin group membership kept to minimum or empty.

 

Exchange full administrators kept to minimum.

 

Latest service packs and patched applied.

 

Client access secured.

 

Address spoofing protection enabled.

 

Anti-virus measures installed.

 

Anti-spam protection enabled in Microsoft Outlook messaging and collaboration client and Exchange.

 

Denial-of-service attack prevention measures configured.

Administrative Group Permissions

Check

Description

 

Administrative Group model designed to suit your company.

 

Minimum Administrative role delegated for each task.

 

System Policies used to configure mailbox and public folder stores.