email article printer friendly more resources

Protect Your Data Files
Take advantage of better options than the Encrypting File System for safeguarding your Exchange data.
by Ben Schorr and Jim McBee

March 2003 Issue

Q I'm worried someone might copy my Exchange data files. Can I use the Encrypting File System (EFS) to protect the files on my Exchange servers?

-Daniel, San Francisco, Calif.

A Ben: San Francisco-I think I could probably gain 10 pounds a week visiting there! However, I'm positive you can cause yourself problems by trying to use EFS. Don't do it. This goes double for using file-based anti-virus software to scan the Exchange data files and the M: drive (the ExIFS drive). And it goes triple for using NT file system (NTFS) compression on Exchange data files and transaction logs.

Jim: Yes, please don't use EFS, NTFS compression, or virus scanners on Exchange data files or the M: drive. Here are a couple of things you should do if you're concerned about the data files' security. First, make sure the Exchange server hardware is physically secure. Second, make sure the tapes you use for back-ups are always secured; tapes sitting on the administrator's desk often lead to data walking out the door.

Ben: Also, remove the Everyone group's permission from the shared SERVERNAME.log and Address folders that are created when Exchange is installed. Confirm that the local administrator's account on the Exchange server has a strong password and that the guest account is disabled.

Q I need to figure out how much storage space to allocate for my users. Is there a recommended limit to the size of the mailbox and public stores? How often should I defragment the stores? Can it cause corruption?

-Maria, Denver, Colo.

A Jim: Actually, Maria, this is a pretty common set of questions. An important part of the Exchange administrative process is figuring out how much disk space to allocate for your users. This is important for setting user expectations, planning the amount of disk space you need, figuring out your backup capacity, and determining how long it'll take to restore the server's data from tape.