Exchange hybrid hardening
Challenge. Legacy authentication was still open on the on-premises Exchange estate, and large attachments were bouncing.
- Discovered and disabled basic auth across Autodiscover, EWS, MAPI, OAB and Outlook Anywhere — scripted, with backup and one-step rollback
- Redesigned SMTP relay: anonymous LAN on 25, authenticated on 587, smart host for third parties
- Raised connector size limits to 50 MB across the organisation