Best Practices

The following are best practices from this chapter:

• Assess the messaging environment's risks.

• Establish a corporate email policy.

• Establish administrative policies.

• Use email disclaimers and have them approved by a legal representative.

• Plan and design Exchange Server 2003 security roles.

• Use a layered approach when hardening Windows Server 2003.

• Perform periodic security assessments.

• Keep updated with the latest service packs and hotfixes.

• Assess the functional role of the server and secure it accordingly .

• Do not install Exchange Server 2003 on a domain controller.

• Standardize Exchange Server 2003 security.

• Implement a mailbox and gateway antivirus scanner.