Michael_Finney
Good point Michael. There is a fair bit of hardening information but it is scattered all over microsoft.com and Microsoft aren't going to help us by generating an Exchange hardening guide. Instead they drop the information in an endless series of disjointed web pages and blog posts that is going to take you years to locate and identify as part of a coherent hardening strategy. Some of these pages are good, some are not good at all, some disappear over time and the information is lost maybe forever. My favorite is the apparently new strategy of providing articles with no date on them so you don't know if they were written last week, last year or last decade or if the guidance in the article changed since the last time you reviewed the article.