Exchange Message Tracking Logging must be enabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-69957 | EX13-MB-000045 | SV-84579r2_rule | Medium |
| Description |
|---|
| A message tracking log provides a detailed log of all message activity as messages are transferred to and from a computer running Exchange. If events are not recorded, it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users. |
| STIG | Date |
|---|---|
| MS Exchange 2013 Mailbox Server Security Technical Implementation Guide | 2019-12-23 |
Details
| Check Text ( C-70427r2_chk ) |
|---|
| Open the Exchange Management Shell and enter the following command: Get-TransportService | Select Name, Identity, MessageTrackingLogEnabled If the value of MessageTrackingLogEnabled is not set to “True”, this is a finding. |
| Fix Text (F-76189r3_fix) |
|---|
| Open the Exchange Management Shell and enter the following command: Set-TransportService -Identity <'IdentityName'> - MessageTrackingLogEnabled $True Note: The |