Blocking Attachments at the Client | Microsoft 1 instruction

78Microsoft Exchange 2000 Operations Guide — Version 1.0

Blocking Attachments at the Client

One of the best ways of protecting against virus infection is to block particular attach- ments from running. Attachments may be blocked at the server level, but they may also be blocked at the client. You can install a security patch on Microsoft Outlook 98 and Outlook 2000. This patch is built into Outlook 2000 Service Release 2 and Outlook 2002 (a component of Microsoft Office XP). The effect of this to prevent certain attachments from running directly from the client (instead they must be saved first) and to prevent other attachments (those considered more dangerous) from being downloaded at all.

Table 5.2 shows the attachments that are prevented from running.

Table 5.2 File Extensions and File Types

File Extension	File Type
.ade	Microsoft Access project extension

.adp	Microsoft Access project

.bas	Microsoft Visual Basic class module

.bat	Batch file

.chm	Compiled HTML help file

.cmd	Microsoft Windows NT command script

.com	Microsoft MS-DOS program

.cpl	Control Panel extension

.crt	Security certificate

.exe	Executable

.hlp	Help file

.hta	HTML program

.inf	Setup information

.ins	Internet naming service

.isp	Internet communication settings

.js	Javascript file

.jse	Javascript encoded script file

.lnk	Shortcut

.mdb	Microsoft Access program

.mde	Microsoft Access MDE database

.msc	Microsoft Common Console document

.msi	Microsoft Windows Installer package

Image 86

Microsoft 1 manual Blocking Attachments at the Client, File Extensions and File Types

Contents

Exchange 2000 Operations Guide Version Isbn Contents Change and Configuration Management Enterprise Monitoring Glossary ProtectionSupport Page Reviewers Content LeadKey Authors ViiPage Introduction Microsoft Operations Framework MOF SLA How to Use This Guide Efficiency, Continuity, and Security Efficiency Continuity Chapter Outlines Capacity and Availability Management Planning and Deployment Protection Service Level Agreements Features Recovery Performance Summary Related TopicsPage Capacity and Availability Management Capacity Management Chapter Sections Capacity and Availability Management Microsoft Exchange 2000 Operations Version Service Hours Availability Management Service Availability Minimizing System Failures Decreasing Single Points of Failure Increasing the Reliability of Exchange Performance Tuning Minimizing System Recovery Time Making Changes to the Registry Optimizable Features No Performance Optimizer Upgrading from Exchange 5.5 to Exchange Tuning ConsiderationsTuning the Message Transfer Agent MTA Tuning Smtp Transport Mailroot Directory Location Smtp File Handles Hkeylocal Active Directory Checking Store and ESE TuningOnline Store Maintenance Online Backups Message Deletion and Online Defragmentation Choosing the Correct Maintenance Strategy First Storage Group Extensible Storage Engine ESE Heaps Store-Database Cache Size Microsoft Exchange 2000 Operations Version Tuning Active Directory Integration Log Buffers Type SET Maxactivequeries to 40 and press Enter Tuning Outlook Web Access OWA Setting OWA Properties Hardware Upgrades Page Change and Configuration Management Defining Change Type Change ManagementPrerequisites Request for Change Is Submitted to Change Manager Change Manager Assesses the RFC Change Is Passed to IT Executive Committee for Approval Change Is Passed to the Change Owner Change Process Evaluation Minor and Standard Changes Scripting Minor and Standard Changes Documentation SecuritySoftware Control and Distribution Configuration Management Configuration Items Tools for Configuration ManagementConfiguration Management and Change Management Microsoft Exchange 2000 Operations Guide Version Configuration Management Relationships Hardware Server Printer Software Exchange Hotfix Nine Configuration Items with Relationships Between Them Configuration Management and Exchange Maintaining the Configuration Management DatabaseDefining Configuration Items Change Management Ownership Exchange System Policies BackupAdministering System Policies Security Summary Enterprise Monitoring Performance Monitoring System Monitor Exchange 2000 Objects and Counters to Monitor Exipc Service or Resource Performance Object Smtp MSExchangeIS Information Store CountersSmtp Server MSExchangeIS Mailbox and MSExchangeIS Public MSExchangeMTA and MSExchangeMTAConnections MSExchangeAL Windows 2000 Objects and Counters to MonitorMSExchangeIM Virtual Servers Subsystem Object Counter Exchange Comments Subsystem Object Counter Exchange Comments Centralized Monitoring Event Monitoring Event Viewer Log Files Centralized Event Monitoring Monitoring and Status Tool Adding Services to the Default ConfigurationAvailability Monitoring Monitoring Resources Notifications Disabling Server Monitoring Centralized Availability MonitoringStatus Client Monitoring Summary Page Chapter Start Point Chapter End Point Protection Against Hacking Firewall Operations Maintaining Firewall Availability Monitoring Against Hacker Intrusion Source Destination Service Protocol and portAnti-Virus Measures Dealing With Security Breaches Staying Current Dealing With Virus Infection Blocking Attachments at the Client File Extensions and File Types File Extension File Type Disaster Recovery Procedures Backing Up Protection Offline Backup Disk Imaging Restoring Recovering Individual MessagesRecovering Lost Mailboxes To connect an Exchange 2000 mailbox to another user Recovering Exchange Stores and Storage Groups Full Exchange Server Recovery Recovering Exchange After Active Directory Failure Recovery Testing Alternate Server Recovery Summary Page Support Providing Support for End Users Reducing End User Support Costs Support Problem Reporting Dealing with User Problems Notifying Users Exchange Problem Management Support Summary Active Directory Connector ADC Access Control Entry ACEAccess Control List ACL Active Directory Services Interfaces Adsi Adsi Edit Administration groupActiveX Data Objects ADO Asymmetric Cipher Collaboration Data Objects CDO for Windows CiphersClear item Collaboration Data Objects Conference Technology Provider CTP Conferencing Management Service CMSConfiguration Connection Agreement ConfigCA Connection Agreement CA Domain tree DSAccess Domain modeDomain Name Services DNS Domain controller Encryption Exchange Conferencing Services ECSEnterprise Epoxy Extensible Storage Engine ESE also known as JET Event ServiceExipc formerly known as Epoxy Forest also known as enterprise Hash Functions Installable File System IFSGroup Instant Messaging IM Joint Engine Technology JET Internet Messaging Access Protocol version 4 IMAP4Lightweight Directory Access Protocol Ldap Link State Algorithm LSA Messaging Application Programming Interface Mapi Metabase update serviceName Service Provider Interface Nspi Metabase Policy Outlook Web AccessOpaque item Post Office Protocol version 3 POP3 Resource Recipient Update Service RUSRemote Procedure Calls RPC Resource mailbox Routing group Routing Group Connector RGCRouting service Routing Engine Security principal SchemaSecure Hash Algorithm version Simple Message Transfer Protocol Smtp Storage group Site Replication Service SRSSite Consistency Checker SCC also known as the Skcc Store User System attendant120 User Principal Name UPN 509 Web-DAVWeb Storage System