1 / 8

Exchange Server Assessment Results

Exchange Server Assessment Results. Click here to view in Azure Log Analytics. Executive Summary. 1. What went well:. 88 % Passed. Operations and Monitoring. 2. What needs Improvement:. Security and Compliance. 3. Highest Priority Recommendations:.

dnicholson
Télécharger la présentation

Exchange Server Assessment Results

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Exchange Server Assessment Results Click here to view in Azure Log Analytics

  2. Executive Summary 1. What went well: 88% Passed • Operations and Monitoring 2. What needs Improvement: • Security and Compliance 3. Highest Priority Recommendations: • Configure and Enforce the Setting "Windows Firewall: Domain: Firewall state" via GPO

  3. Security and Compliance • Highest Priority Recommendations • Configure and Enforce the Setting "Windows Firewall: Domain: Firewall state" via GPO Enable and Enforce the Setting "Turn off Autoplay" via GPO Configure and Enforce the Setting "Windows Firewall: Public: Firewall state" via GPO Mitigations missing for speculative execution side-channel vulnerabilities Configure the Setting "Network security: LAN Manager authentication level" and Enforce via GPO Ensure that the default Exchange ActiveSync policy reflects the security requirements of your organization. Use the default client throttling values in the default throttling policy Define and Enforce Setting "Back up files and directories" via GPO for Accounts Which Need This Level of Access Configure Authorized User List for Setting "Restore files and directories" and Enforce via GPO Review permissions on the "Exchange Administrative Group (FYDIBOHF23SPDLT)" object in the configuration partition 71% Passed

  4. Operations and Monitoring • Highest Priority Recommendations • Investigate reasons why Event ID 15006, MSExchangeTransport, ‘The Microsoft Exchange Transport service is rejecting messages because available disk space is below the configured threshold’ has occurred. 99% Passed

  5. Upgrade, Migration and Deployment • Highest Priority Recommendations • Install the latest updates on your Exchange Servers. Exchange databases that host mailboxes should always have an offline address book configured. Ensure that each site containing Exchange Server computers has at least two Domain Controllers that are also Global Catalog servers. Configure Windows SmartScreen 90% Passed

  6. Availability and Business Continuity • Highest Priority Recommendations • Ensure that all your production Exchange databases which do not have circular logging configured are being backed up on a regular basis. Ensure that all required Exchange Server services are running. Ensure that the Offline Address Book (OAB) mailbox where the Offline Address Book (OAB) is generated is hosted on a database which is replicated within a Database Availability Group (DAG) on computers running Exchange Server 2013/2016. If a content index catalog on a mailbox database copy becomes corrupted, reseed the catalog from another Exchange Server. Check the health status of your Exchange servers. Consider upgrading BIOS Versions that are between 7 and 10 years old. 97% Passed

  7. Performance and Scalability • Highest Priority Recommendations • If Microsoft Exchange back pressure events are detected, ensure that your Exchange servers have adequate system resources for the task. 97% Passed

  8. Change and Configuration Management • Highest Priority Recommendations • Servers should only be in Maintenance Mode while undergoing maintenance operations. Return the maximum allowed recipients value to its default setting. 85% Passed

More Related