UCF STIG Viewer Logo

The Exchange local machine policy must require signed scripts.


Overview

Finding ID Version Rule ID IA Controls Severity
V-221216 EX16-ED-000150 SV-221216r612603_rule Medium
Description
Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided.
STIG Date
Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide 2022-06-09

Details

Check Text ( C-22931r411774_chk )
Open the Exchange Management Shell and enter the following command:

Get-ExecutionPolicy

If the value returned is not "RemoteSigned", this is a finding.
Fix Text (F-22920r411775_fix)
Open the Exchange Management Shell and enter the following command:

Set-ExecutionPolicy RemoteSigned