UCF STIG Viewer Logo

Exchange message tracking logging must be enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-259583 EX19-ED-000034 SV-259583r942063_rule Medium
Description
A message tracking log provides a detailed log of all message activity as messages are transferred to and from a computer running Exchange. If events are not recorded, it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.
STIG Date
Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide 2024-01-10

Details

Check Text ( C-63322r942061_chk )
Open the Exchange Management Shell and enter the following command:

Get-Transportservice | Select-Object -Property Name, MessageTrackingLogEnabled

If the value of "MessageTrackingLogEnabled" is not set to "True", this is a finding.
Fix Text (F-63230r942062_fix)
Open the Exchange Management Shell and enter the following command:

Set-Transportservice -MessageTrackingLogEnabled $true

Note: The value must be in quotes.