Exchange Server 2010 Hardening

Posted on 2012-12-22
Last Modified: 2012-12-26
Hi ,

We are planning to upgrade Exchange from Exchange 2007 to Exchange 2010. Please let me know what is the best practices to do the Exchange Serevr 2010 Hardeing before putting into Production environment.
Question by:padas6
  • 3
  • 3
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38715153
What is your current infrastructure and do you have the budget for HA ?
Look i dont think anyone can give you a complete answer before knowing your thoughts and basic requirements

- Rancy
"Merry Christmas and Happy New Year"

Author Comment

ID: 38715168
Hi Rancy,

Current Infrastructure is Exchange Server 2007 SCC model with Single HUb & Single CAS, duel Iron Port is being used for SMTP gateway with 2000 user mailbox .

We are planning to Migrate with below feature,

1. Two HUB & CAS in Cas Array
2. Two Mailbox Server is in DAG Functionality.

We are already going to start to installation but I have couple of queries which I posted today itself.

I just wanted to know if any good guidelline is availble for Exchange Hardening.
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38715179
Perfect for your concern for point 1 & 2

Look i would suggest use Storage Calculator to understand whats best with number of Mailbox DB's you should have .... (Ram, Storage, Bandwidth)

Are you not getting a EDGE but using Ironport itself i guess ?
What exactly do you mean by Hardening ?

- Rancy
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Comment

ID: 38715189
Server haredening, sany Minimum port opening, renaming local administrator account, basically you can server Server Hardening & if any thing I can focus on Exchange part.
LVL 52

Accepted Solution

Manpreet SIngh Khatra earned 300 total points
ID: 38715197
Look Ports i guess should be opened for it to communicate with DC\GC and fr port25 and HTTP and HTTPS rest depends if there is some additional ports you need to open on it.

- Rancy

Author Closing Comment

ID: 38720872
Usuable link.

Featured Post

Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a trade show? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to:…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now