UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Exchange Mail quota settings must not restrict receiving mail.


Overview

Finding ID Version Rule ID IA Controls Severity
V-207297 EX13-MB-000155 SV-207297r615936_rule Low
Description
Mail quota settings control the maximum sizes of a user’s mailbox and the system’s response if these limits are exceeded. Mailbox data that is not monitored against a quota increases the risk of mail loss due to filled disk space, which can also render the system unavailable. Failure to allow mail receipt may impede users from receiving mission-critical data.
STIG Date
Microsoft Exchange 2013 Mailbox Server Security Technical Implementation Guide 2020-12-11

Details

Check Text ( C-7555r393404_chk )
Open the Exchange Management Shell and enter the following command:

Get-MailboxDatabase | Select Name, Identity, ProhibitSendReceiveQuota

If the value of ProhibitSendReceiveQuota is not set to Unlimited, this is a finding.

or

If the value of ProhibitSendReceiveQuote is set to an alternate value and has signoff and risk acceptance in the EDSP, this is not a finding.
Fix Text (F-7555r393405_fix)
Open the Exchange Management Shell and enter the following command:

Set-MailboxDatabase -Identity <'IdentityName'> -ProhibitSendReceiveQuota Unlimited

Note: The value must be in quotes.

or

The value as identified by the EDSP that has obtained a signoff with risk acceptance.