How can we secure Exchange 2007 server? This settings we can consider for Exchange 2007 baseline security.
Here is the one option.
WSS and UNC provided file share access for mobile devices. If the functionality is not needed by mobile users then it should be disabled to reduced Exchanges attack surface and exposure to internal file shares.
How to implement
Open the Exchange Management Console, perform the following steps:
– Microsoft Exchange Organization Configuration –> Client Access –>Exchange ActiveSync Mailbox Policies
– Right Click on <name> Policy, Select Properties
– General Tab WSS/UNC Access Windows File Shares: Unchecked
Windows SharePoint Services : Unchecked
- Open the Exchange Management Shell, perform the following:
Set-ActiveSyncMailboxPolicy –identity <name> -WSSAccessEnabled $false -UNCAccessEnabled $false