Exchange 2003 Security Snippets

You've probably heard Microsoft's 'more secure by default' message on their new 2003 suite of products. How does this apply to Exchange 2003? Here's a useful list of 5 specific changes that have been made to Exchange 2003.

1. On a clean Exchange 2003 server installation, you will now notice that the POP3, IMAP4 and NNTP services are disabled by default. Note that, on upgrades and reinstallations, the current state of the service is preserved.

2. Ordinary domain user accounts will not be able to log on locally to an Exchange 2003 server. Note that this will happen on all installations of Exchange 2003, be they new installations, reinstallations or upgrades. Of course, Server Operators, local Administrators and those with higher privileges will still be able to log on locally.

3. The global maximum message size limits will be set to 10MB when the first Exchange 2003 server is installed, even with upgrades from Exchange 2000 if the sizes weren't already set. However, if you already had size limits in your Exchange 2000 organisation, they'll be preserved.

4. The maximum size limit of a public folder posting will be set to 10MB on every Exchange 2003 installation or upgrade if the values weren't already set. However, if you already had public folder size limits configured in your Exchange 2000 organisation, they'll be preserved.

5. The ability to create top-level public folders will be removed for 'Everyone' and 'Anonymous Logon'. This is performed when the Exchange 2003 ForestPrep process is run.

Account Deleted on September 9, 2003 at 06:27 AM in Useful Info
« Exchange Clustering Webcast Today | Main | Exchange 2003 Deployment Guide Updated »

TrackBack

TrackBack URL for this entry:
https://www.typepad.com/services/trackback/6a00d8345191a569e200e55034587f8834

Listed below are links to weblogs that reference Exchange 2003 Security Snippets: