S 2.480 Use of the Exchange and Outlook documentations

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: Administrator, Developer

Microsoft provides a wealth of free information in a centralised manner using the Microsoft TechNet Service (http://technet.microsoft.com). Documentations, online support, operating instructions, etc. for Microsoft products can be found here.

Furthermore, the Microsoft TechNet contains references to further sources of information. Some examples are mentioned below:

• The Microsoft TechNet offers instructions or additional software. First and foremost the security-relevant information to be found in the menu entries for "Security" must be taken into consideration. Furthermore, the Microsoft product security guidelines available in the download centre are important. In the present context, the security guidelines for "Messaging" and "Collaboration" are of particular relevance.
• The Microsoft Developer Network (http://msdn.microsoft.com) is intended as a source of information for developers. It is necessary to register, but registration is free.

For the products of the Exchange server family, the up-to-date online Documentation for every version can be found in Microsoft TechNet. In the Exchange Server TechCenter all necessary information can be found. The same is applicable to the documentation of Microsoft Outlook that can be found in the Office TechCenter.

Regarding the security-relevant documents and instructions, information can be found in the "Security Compliance Management Toolkit" offering the current security guidelines, instructions on secure installation and monitoring, as well as further documents and support.

For example, this means the following for Microsoft Exchange/Outlook 2010:

• For the Microsoft Exchange Server 2010 version, relevant documentations, downloads, and instructions can be found in the Exchange TechCenter (keyword Microsoft Exchange Server).
• The security manual for Exchange 2010 (not yet published) is particularly important for secure installation and operation of an Exchange installation. This manual was written for IT administrators responsible for protecting the provision of Exchange 2010. It is intended to support the IT administrator in understanding and managing the entire security environment Exchange is installed in.
• The latest version of the Exchange Server 2010 documentation can be found in "Exchange Server 2010 Home Page".
• For the Microsoft Outlook 2010 version, relevant documentations, downloads, and instructions can be found in the Outlook 2010 Resource Kit ("Office 2010 Beta Resource Kit"). Aspects in the field of information security are dealt with in "Security and protection for Office 2010 Beta".

Review questions:

• Are the administrators familiar with the current online documentation for Microsoft Exchange and Microsoft Outlook?