Seriously, no one?

If you were tasked with doing a "top 10" controls type audit/assessment of a companies exchange servers what would you focus on, i.e. what would your top 10 critical controls specific for exchange? I dont mind if its just security or security/mgmt, but theres very little out there on what youd audit when looking at exchange, whereas for AD, windows server, sql server theres tons of resources.

Hi, Your question is difficult, because there are a lot of various critical controls for Exchange. For example, top of them are Active Directory, DNS, Cluster Services and also storage system, hardware platform or virtual and etc. That all depends on the specific Exchange infrastructure. For more information, please, refer to the topics below, Understanding Exchange Performance Exchange Server 2010 SP2 Help MCTS: Microsoft Exchange Server 2007/2010 | MCSA

Hi, Your question is difficult, because there are a lot of various critical controls for Exchange. For example, top of them are Active Directory, DNS, Cluster Services and also storage system, hardware platform or virtual and etc. That all depends on Exchange infrastructure. For more information, please, refer to the topics below, Understanding Exchange Performance Exchange Server 2010 SP2 Help MCTS: Microsoft Exchange Server 2007/2010 | MCSA I appreciate its a complex architecture, but still, there is no audit guide for exchange, not one that I could find. So I was hoping people may participate in hel;ping assist with a top 10 areas at least.

A few I had thought up were: Ensure the Exchange servers are fully patched with MS updatesEnsure their are no admin vulns such as weak local passwordsEnsure prmissions to mailboxes are granted only on buisness need to knowEnsure there is no confidential data in public folders I am sure there must be many more