80 likes | 94 Views
Exchange Server Assessment Results. Click here to view in Azure Log Analytics. Executive Summary. 1. What went well:. 88 % Passed. Operations and Monitoring. 2. What needs Improvement:. Security and Compliance. 3. Highest Priority Recommendations:.
E N D
Exchange Server Assessment Results Click here to view in Azure Log Analytics
Executive Summary 1. What went well: 88% Passed • Operations and Monitoring 2. What needs Improvement: • Security and Compliance 3. Highest Priority Recommendations: • Configure and Enforce the Setting "Windows Firewall: Domain: Firewall state" via GPO
Security and Compliance • Highest Priority Recommendations • Configure and Enforce the Setting "Windows Firewall: Domain: Firewall state" via GPO Enable and Enforce the Setting "Turn off Autoplay" via GPO Configure and Enforce the Setting "Windows Firewall: Public: Firewall state" via GPO Mitigations missing for speculative execution side-channel vulnerabilities Configure the Setting "Network security: LAN Manager authentication level" and Enforce via GPO Ensure that the default Exchange ActiveSync policy reflects the security requirements of your organization. Use the default client throttling values in the default throttling policy Define and Enforce Setting "Back up files and directories" via GPO for Accounts Which Need This Level of Access Configure Authorized User List for Setting "Restore files and directories" and Enforce via GPO Review permissions on the "Exchange Administrative Group (FYDIBOHF23SPDLT)" object in the configuration partition 71% Passed
Operations and Monitoring • Highest Priority Recommendations • Investigate reasons why Event ID 15006, MSExchangeTransport, ‘The Microsoft Exchange Transport service is rejecting messages because available disk space is below the configured threshold’ has occurred. 99% Passed
Upgrade, Migration and Deployment • Highest Priority Recommendations • Install the latest updates on your Exchange Servers. Exchange databases that host mailboxes should always have an offline address book configured. Ensure that each site containing Exchange Server computers has at least two Domain Controllers that are also Global Catalog servers. Configure Windows SmartScreen 90% Passed
Availability and Business Continuity • Highest Priority Recommendations • Ensure that all your production Exchange databases which do not have circular logging configured are being backed up on a regular basis. Ensure that all required Exchange Server services are running. Ensure that the Offline Address Book (OAB) mailbox where the Offline Address Book (OAB) is generated is hosted on a database which is replicated within a Database Availability Group (DAG) on computers running Exchange Server 2013/2016. If a content index catalog on a mailbox database copy becomes corrupted, reseed the catalog from another Exchange Server. Check the health status of your Exchange servers. Consider upgrading BIOS Versions that are between 7 and 10 years old. 97% Passed
Performance and Scalability • Highest Priority Recommendations • If Microsoft Exchange back pressure events are detected, ensure that your Exchange servers have adequate system resources for the task. 97% Passed
Change and Configuration Management • Highest Priority Recommendations • Servers should only be in Maintenance Mode while undergoing maintenance operations. Return the maximum allowed recipients value to its default setting. 85% Passed