Forum Discussion

SOS4SOS's avatar
SOS4SOS
Copper Contributor
Mar 13, 2021

Disable Exchange Services for version 2013-keep server running though

We have Exchange Server 2013 on a Windows 2012 R2 server running but we no longer use the exchange software for email--the services are still running however. We still need the server for other reasons (DC) and do not want it compromised by Hafnium. What services can we disable to protect the server?

  • MDadarkar's avatar
    MDadarkar
    Brass Contributor

    Hi SOS4SOS ,

     

    Note: This is not the best practice to keep DC and exchange on the same server.

     

    If the exchange service is completely blocked from the internet, it’s basically safe. But Microsoft still suggests doing the patching ASAP.

     

    I will suggest stopping all the Exchange services and DISABLED them permanently to avoid any risk in the future.

     

    Thank you,

    Regards,
    MD

    please do like and share this post, if my answer resolved your issue..

    • SOS4SOS's avatar
      SOS4SOS
      Copper Contributor

      Hi MDadarkar ,

       

      Thank you for the reply. Yes we migrated the mailboxes to Exchange online over 2 years ago, but kept exchange services running. Do you mean that by disabling the Exchange Services it is blocked from Internet or is there an additional way to block exchange from Internet-like a port or something? And is there a particular order to disabling services-there are many!

      Thank you.

      • MDadarkar's avatar
        MDadarkar
        Brass Contributor

        Hi SOS4SOS ,

         

        1. Disable All Exchange Services 
        2. Block Ports as well.

         

        I hope this is informative.

         

        Thank you,

        Regards,

        MD

Resources