Provider pilot guide

Exchange on-premises: verify the boundary before rollout.

Treat every supported Exchange version, hybrid boundary, and customer-side component as an explicit deployment profile—not a generic SMTP promise.

1. 01Identify the licensed Exchange version, patch level, topology, and responsible administrator.
2. 02Review a least-privilege read-only directory workflow and avoid exposing LDAP, WinRM, or domain controllers publicly.
3. 03Choose native/client or customer-controlled relay behavior and document the authenticated handoff boundary.
4. 04Run reviewed PowerShell preflight and rollback scripts in a non-production lab.
5. 05Record queue, loop, TLS, MIME, reply/forward, unsupported-message, and restoration evidence.