[...]... Baseline Security Customizing Server Security Securing Servers According to Server Roles Security Issues Related to All Server Roles Securing Domain Controllers Securing File and Print Servers Securing DHCP, DNS, and WINS Servers Securing Web Servers Securing Database Servers Securing Mail Servers 292 292 292 293... mentioned that Exchange Server 2003 is the most secure Exchange version released to date, but bear in mind that to achieve the most secure Exchange 2003 environment possible, Exchange 2003 must be installed on a Windows 2003 server We say this because it’s also possible to install Exchange 2003 on Windows 2000 (SP3) server Because Windows 2003 Server has been through a full code review and has been designed... resident Exchange mailboxes Antivirus products are allowed to delete messages and send messages to the sender in the Exchange 2003 AV API 2.5 version ■ Clustering authentication Exchange Server 2003 clustering supports Kerberos authentication against an Exchange virtual server ■ Administrative permissions Cross-forest support and the ability to administer both Exchange 2000 Server and Exchange Server 2003. .. responsibly.You need to CYA CYA: Securing Exchange Server 2003 and Outlook Web Access is part of the new CYA series from Syngress that clearly identifies those fea­ tures of Exchange/ OWA that represent the highest risk factors for attacks, performance degradation and service failures; and then walks you through step-by-step configurations to assure they have been thor­ ough and responsible in their... Windows 2003 and Exchange 2003, if possible, using an installation checklist that focuses on not only security but system stability Your A** Is Covered If You… Know what the Microsoft Trustworthy Computing Initiative is all about and know how it affects Microsoft products such as Windows 2003 Server and Exchange 2003 Are aware of the default settings when comparing Exchange 2000 and Exchange 2003 Have... Security • Chapter 1 Outlook Web Access 2003 Security Enhancements One of the components in Exchange 2003 that has benefited from a complete update, in terms of both functionality and security improve­ ments, is Outlook Web Access (OWA) OWA now supports S/MIME, just like the full Outlook MAPI client.This is a big improvement because it allows you to digitally sign and encrypt e-mail messages and attachments... Admin Service Microsoft Exchange System Attendant IIS Admin Service Continued Windows and Exchange 2003 Security Practices • Chapter 2 Table 2.1 Exchange 2003 Services and Dependencies Exchange 2003 Service Microsoft Exchange Routing Engine (process of inetinfo.exe) Microsoft Exchange IMAP4 (process of inetinfo.exe) Microsoft Exchange POP3 (process of inetinfo.exe) Microsoft Exchange MTA Stacks (emsmta.exe)... Installing Exchange 2003 23 Your A** Is Covered If You… 24 Chapter 3 Delegating and Controlling Permissions in Exchange 2003 25 In this Chapter 25 Delegating Administrative Control in System Manager 26 Exchange Server 2003 Permissions 26 Viewing Exchange Server Permissions in Exchange System Manager 29 Using the Exchange. .. (Authentication Servers) 275 Active Directory 275 Operations Master Roles 276 File and Print Servers 278 Print Servers 278 File Servers 279 DHCP, DNS, and WINS Servers 279 DHCP Servers 279 DNS Servers 279 WINS Servers 280 Web Servers ... that you upgrade Exchange 2000 to Exchange 2003 first and then the Windows 2000 platform to Windows 2003 Carefully installed Exchange 2000 installations may already be more secure than a basic Exchange 2003; this is especially true if you have followed good security practices with Exchange 2000 More information on upgrades and Exchange compatibility can be found at www.microsoft.com /exchange/ evaluation/ti/TiWinNet.asp . 299 _CYA_ EXCHG_FM.qxd 4/23/04 3:52 PM Page ii 299 _CYA_ EXCHG_FM.qxd 4/23/04 3:52 PM Page iii Securing Exchange Server Securing Exchange Server 2003 and Outlook Web Access 2003 and Outlook Web Access COVER. help and a fail-safe checklist that guarantee that you’ve configured your network professionally and responsibly.You need to CYA . CYA: Securing Exchange Server 2003 and Outlook Web Access. . . .298 Securing DHCP, DNS, and WINS Servers . .300 Securing Web Servers . . . . . . . . . . . . . . . .301 Securing Database Servers . . . . . . . . . . . . .302 Securing Mail Servers .