If you were tasked with doing a "top 10" controls type audit/assessment of a companies exchange servers what would you focus on, i.e. what would your top 10 critical controls specific for exchange? I dont mind if its just security or security/mgmt, but theres very little out there on what youd audit when looking at exchange, whereas for AD, windows server, sql server theres tons of resources.

If you mean performance for Exchange Server, you can refer to this document: Understanding Exchange Performance http://technet.microsoft.com/en-us/library/dd351192.aspx Thanks, EvanEvan Liu TechNet Community Support