Message Tracking Logging must be enabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-33615 | Exch-1-808 | SV-44035r1_rule | ECSC-1 | Medium |
| Description |
|---|
| A message tracking log provides a detailed log of all message activity as messages are transferred to and from a computer running Exchange. If events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users. |
| STIG | Date |
|---|---|
| Exchange 2010 Mailbox Server STIG | 2014-03-11 |
Details
| Check Text ( C-41722r1_chk ) |
|---|
| Open the Exchange Management Shell and enter the following command: Get-MailboxServer | Select Name, Identity, MessageTrackingLogEnabled If the value of 'MessageTrackingLogEnabled' is not set to 'True', this is a finding. |
| Fix Text (F-37507r1_fix) |
|---|
| Open the Exchange Management Shell and enter the following command: Set-MailboxServer -Identity <'ServerName'> -MessageTrackingLogEnable $True |