Hardening Lync Server

This short document outlines some steps which can be performed on an Lync 2010 environment if you wish to do some environment hardening.

General Windows Hardening:

• Disable NTFS 8 Dot 3
• Disable COM, LTP and Floppy
• Disable NetBIOS
• Windows Hardening: Disable the Print Spooler Service
• Make sure you are using Microsoft Updates rather Windows Updates
• Disable the “X-AspNet-Version” header
• Upgrade Diffie-Hellman Prime to 2048 bit as explained here.
• Enable TLS 1.1 and TLS 1.2 as a default secure protocols in WinHTTP (see here)

Addition:

• Disable the “WinHTTP Web Proxy Auto-Discovery Service” service and set any needed proxy by hand