flugaurj
asked on
External Hostname in Exchange changed randomly
The other day we started havign issues with users Outlook Anywhere and Smartphones. So I started digging into things and I found that the ExternalHostname in Exchange 2007 had been changed! We haven't done any work on the server or anything. Is there anyway that I could have been hacked or a virus changed this?? I took a look at the event and didn't see anything....is there any way I can find who/what made the change? We are running Exchange 2007 on Windows 2008 64bit
ASKER
It doesn't look like we are running SP2. Is there a reason why that isn't pushed through WSUS? I think we are on SP1 Rollout 6
WSUS will never push out service packs for things like exchange, unless you specifically request it.
I would NOT recommend this!
Manually install servicepacks at a time when users wont be affected by the downtime of the reboot.
Regarding your hostname.
unless you already have logging enabled at a high enough setting that you will capture all changes made to the external hostname, you will not be able to find out who did it, since it will not have been recorded.
Simply change it back, and try and restrict access to the server some more, or implement a better loggin.
I would not recommend enabling all the logging features, since they might just bog down your servers log files.
I would NOT recommend this!
Manually install servicepacks at a time when users wont be affected by the downtime of the reboot.
Regarding your hostname.
unless you already have logging enabled at a high enough setting that you will capture all changes made to the external hostname, you will not be able to find out who did it, since it will not have been recorded.
Simply change it back, and try and restrict access to the server some more, or implement a better loggin.
I would not recommend enabling all the logging features, since they might just bog down your servers log files.
Do you have a firewall and a log server?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you got all the latest uodates? Exchange 2007 SP2?