EXPERT RESPONSE
Your best bet is going to be to review any IIS and Exchange logs that are enabled on the server. The following are two pieces from SearchExchange.com that can help:
Checking logs for OWA logon attempts
Decoding Outlook Web Access log entries
To read questions and answers from all of our Windows security experts, click here.
More information on Web security, IIS and Exchange
- Internet Information Services Security Journal
IIS still may not be the most secure Web server on the market, but with some careful configurations you can lock down IIS against most attacks. Learn how to secure IIS and its many related services in this IIS security journal.
- IIS security: Configure Web server permissions for better access control
Expanding your client/vendor base? Learn why you should update user access controls and how configure IIS Web server permissions to secure access controls, in this tip.
- Exchange Server security essentials
This compilation of our favorite Exchange Server security best practices, tips and tools will improve your fundamental understanding of common email security threats -- viruses, spam and phishing -- and teach you how to prevent and troubleshoot them.
|
