How to improve security to my IIS and Exchange folders?
Posted on 2006-07-13
I have been modifying a lot of things and permissions trying to configure correctly OWA with SSL, OMA, and Microsoft-Active-Sync for PDAs, etc... Even I have modified some root properties today by error and obviously it affects of all the rest of the folders. I am worried about it and I would like to learn some basic "must to know" about this secure procedures. I would like to secure these folders of my IIS server.
I only want to allow OWA access (SSL), OMA Access (to one PDA without SSL support) I know that each service requires a default properties, but I would like to find a all-in-one, able and secure way... Anyone could help or recommend me a basic things to know about this? I have all these options but I am not sure at all if these are correct or huge unsecure...
/root default server: Anonymous and basic ONLY + SSL require
/exadmin: Integrated ONLY + SSL require
/exchange: Integrated and Basic ONLY + SSL require
/exchweb: Anonymous ONLY + SSL require
/Microsoft-Server-ActiveSync: Integrated and Basic ONLY (no SSL)
/OMA: Basic ONLY (no SSL)
/rpc: Integrated and Basic ONLY + SSL require (no SSL)
/rpcwithCert: Integrated and Basic ONLY + SSL require (no SSL)
/certcontrol: Integrated ONLY + SSL require
/certEnroll: Anonymous ONLY + SSL require
/certServ: Integrated ONLY + SSL require
/public: Integrated and Basic ONLY + SSL require
Any web info or recommendations? Thank you very much for this