Checklist - Securing Your Exchange Environment

Updated: February 3, 2004

On This Page
How to Use This Checklist How to Use This Checklist
General Security issues General Security issues
Administrative Group PermissionsAdministrative Group Permissions

How to Use This Checklist

This checklist is a companion to the module, "Securing Your Exchange Environment." Use it to help you to secure your Microsoft Exchange 2000 servers, or as a quick reference for the corresponding module. This checklist should develop as you discover steps that help you to implement your secure Exchange organization.

Top of pageTop of page

General Security issues

CheckDescription

All unnecessary services disabled.

Schema Admin group membership kept to minimum or empty.

Exchange full administrators kept to minimum.

Latest service packs and patched applied.

Client access secured.

Address spoofing protection enabled.

Anti-virus measures installed.

Anti-spam protection enabled in Microsoft Outlook messaging and collaboration client and Exchange.

Denial-of-service attack prevention measures configured.

Top of pageTop of page

Administrative Group Permissions

CheckDescription

Administrative Group model designed to suit your company.

Minimum Administrative role delegated for each task.

System Policies used to configure mailbox and public folder stores.


Top of pageTop of page