CIS Exchange Server 2003 Benchmark, v 1.0信息安全培训.pdfVIP

CISExchangeServer2003Benchmark

Version1.0

Copyright2005,TheCenterforInternetSecurity

ThisPageIntentionallyLeftBlank

ii

Warnings

Donotattempttoimplementanyofthesettingsinthisguidewithoutfirsttestinginanon-

operationalenvironment.

Thisdocumentisonlyaguidecontainingrecommendedsecuritysettings.Itisnotmeant

toreplacewell-structuredpolicyorsoundjudgment.Furthermore,thisguidedoesnot

addresssite-specificconfigurationissues.Caremustbetakenwhenimplementingthis

guidetoaddresslocaloperationalandpolicyconcerns.

ThesecurityconfigurationdescribedinthisdocumenthasbeentestedonaWindows

Server2003system.Extracareshouldbetakenwhenapplyingtheconfigurationinother

environments.

SOFTWAREISPROVIDEDASISANDANYEXPRESSORIMPLIEDWARRANTIES,

INCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTIESOF

MERCHANTABILITYANDFITNESSFORAPARTICULARPURPOSEARE

EXPRESSLYDISCLAIMED.INNOEVENTSHALLTHECONTRIBUTORSBELIABLE

FORANYDIRECT,INDIRECT,INCIDENTAL,SPECIAL,EXEMPLARY,OR

CONSEQUENTIALDAMAGES(INCLUDING,BUTNOTLIMITEDTO,PROCUREMENT

OFSUBSTITUTEGOODSORSERVICES;LOSSOFUSE,DATA,ORPROFITS;OR

BUSINESSINTERRUPTION)HOWEVERCAUSEDANDONANYTHEORYOF

LIABILITY,WHETHERINCONTRACT,STRICTLIABILITY,ORTORT(INCLUDING

NEGLIGENCEOROTHERWISE)ARISINGINANYWAYOUTOFTHEUSEOFTHIS

SOFTWARE,EVENIFADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGE.