Successful attacks on services such as Exchange are frequently made possible by incorrectly configured systems. Since an Exchange system is very complex, diverse configuration settings and interdependent parameters may cause numerous security issues. Possible incorrect configurations range from the installation and operation of the Exchange components on inappropriate systems, the absence of encryptions, and insufficient access restrictions on Exchange servers to the incorrect assignment of rights when creating or initialising an Exchange database.