Exchange Mail quota settings must not restrict receiving mail.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Exchange Mail quota settings must not restrict receiving mail.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-70001	EX13-MB-000155	SV-84623r1_rule		Low

Description
Mail quota settings control the maximum sizes of a user’s mailbox and the system’s response if these limits are exceeded. Mailbox data that is not monitored against a quota increases the risk of mail loss due to filled disk space, which can also render the system unavailable. Failure to allow mail receipt may impede users from receiving mission-critical data.

STIG	Date
MS Exchange 2013 Mailbox Server Security Technical Implementation Guide	2019-12-23

Details

Check Text ( C-70475r1_chk )
Open the Exchange Management Shell and enter the following command: Get-MailboxDatabase \| Select Name, Identity, ProhibitSendReceiveQuota If the value of ProhibitSendReceiveQuota is not set to Unlimited, this is a finding. or If the value of ProhibitSendReceiveQuote is set to an alternate value and has signoff and risk acceptance in the EDSP, this is not a finding.

Fix Text (F-76237r1_fix)
Open the Exchange Management Shell and enter the following command: Set-MailboxDatabase -Identity <'IdentityName'> -ProhibitSendReceiveQuota Unlimited Note: The value must be in quotes. or The value as identified by the EDSP that has obtained a signoff with risk acceptance.