Penetration Testing mailing list archives

Re: Exchange mail server settings - easy dump possible?


From: David Wyatt <davidwyatt () gmail com>
Date: Mon, 18 Jul 2005 16:31:45 -0700

There is a utility on your exchange server CD of use called exchdump.
We use this in PSS for Exchange support and it does a great job of
dumping configuration information for servers, mailboxes, connectors
and all sorts of AD objects.

 You can read about it and also get a link to download the latest
version from Microsoft here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;839116

This is burned into the Exchange server CD and may be called exchutil
(former name for the utility).

-David Wyatt
Senior Technical Consultant

On 5/23/05, Petr.Kazil () eap nl <Petr.Kazil () eap nl> wrote:

I've been playing with a trial version of Exchange Server 2003.
Using the NIST, NSA and Microsoft security guidelines I'm getting a better
idea of the relevant security settings.
But it's a pain to click through all the relevant screens in the System
Manager GUI.

Is there a tool that dumps all the settings in one readable text file - for
example like Dumpsec ?
I haven't been able to find it yet.

I have found and used the Exchange Best Practices Analyzer Tool, and it
works fine and covers some of the relevant settings but (AFAIK) not all of
them.

Or are the settings stored in the registry, a config file or an XML-file
with settings somewhere?
I'm reluctant to try scripting, because I fear that the learning curve will
be steep (I know VBscript but not the WMI/API interfaces I would probably
need).

I will search through my old WindowsITPro magazines and probably it will be
in here somewhere ...

Thanks for any suggestions.
Petr




Current thread: