Summary

As shown seen in this chapter, properly securing a Lync Server 2010 implementation is a valuable process because it protects the servers from potential exploitation. By utilizing existing technologies such as firewalls and proxies, one can greatly reduce the attack surface of Lync Server 2010. Through the use of limited rights and managed service accounts, one can greatly reduce the possibility of unauthorized users gaining access to the new system.

Configuring protective features in the operating system is a relatively painless process that can go a long way toward securing the overall implementation. Tasks as simple as limiting rights to shares and controlling services will also serve to reduce the attack surface of a Lync Server 2010 deployment. As mentioned in this chapter, this process of locking down systems is especially important if hosts will be accessed from outside the organization or if sensitive information will be communicated within Lync Server 2010.