SCW Back/Front Install (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message

yguelce -> SCW Back/Front Install (5.Dec.2006 4:09:15 PM)

I just installed Exchange in a cluster environment. I'm getting ready to apply the Security Configuration Wizard on these servers. However, this server will play the role of backend and front-end server for the organization. Nonetheless, I noticed there isn't a security policy specifically for back-end/front-end server on the list. Since this server will be playing both roles, should I apply both policies (Front and Backend)? And if I need to apply both, is there an order in which I should apply them?

Thanks
-YG



jchong -> RE: SCW Back/Front Install (5.Dec.2006 4:13:05 PM)

Not sure, they might be mutually exclusive policies. I'll hold off until you get some feedbackup. I'll look into this myself.



jchong -> RE: SCW Back/Front Install (5.Dec.2006 4:19:00 PM)

From my research they are exclusive settings. Don't mix and match.

http://www.msexchange.org/tutorials/Hardening-Exchange-Server-2003-Environment-Part2.html

http://support.microsoft.com/?kbid=896742



yguelce -> RE: SCW Back/Front Install (7.Dec.2006 5:25:49 PM)

Thanks James,
I have successful download and read the hardening Exchange 2003. Since they do not have any policy specifically for front/back-end server for say. Therefore, I believe I should be applying the following security policies to the exchange servers (yes, we're running exchange on 2 nodes cluster)

Policy Applying:
Windows Server Baseline Policy Template 
Exchange Domain Controller Baseline Policy Template
Back-end Server Policy Template

Please let's if I have the right policies or if there's any I shouldn't apply.

In addition, would that be correct, these policies should be applied to both cluster nodes?

Thanks



jchong -> RE: SCW Back/Front Install (8.Dec.2006 9:46:54 AM)

Exchange Domain Controller Baseline Template.

This policy is for domain controllers in which the domain had exchange servers. You do not apply this to an Ex server.
"The Exchange Domain Controller Baseline Policy modifies the domain controllers in your forest so they can support Exchange operations. "

http://www.microsoft.com/technet/prodtechnol/exchange/Guides/E2k3SecHardGuide/e720c32f-710a-42a7-bdea-ab5bf600c32b.mspx?mfr=true

So only

Back-end Server Policy Template
Windows Server Baseline Policy Template 



Page: [1]