Exchange 2000/2003 relaying/spoofing

Hey all-

Has anyone here come across an easily digestible way to tie an Exchange server down so that relaying and spoofing/weak password account hijacking become much less likely to occur in a large organization?

Thanks,
Raph