Search – Exchange Folder Indexing

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15712	5.233	SV-16651r1_rule	ECSC-1	Low

Description
This check verifies that mail items on a Microsoft Exchange server are not indexed when Outlook is run in uncached mode.

STIG	Date
Windows Vista Security Technical Implementation Guide	2013-03-14

Details

Check Text ( C-15400r1_chk )
If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\Windows Search\ Value Name: PreventIndexingUncachedExchangeFolders Type: REG_DWORD Value: 1

Fix Text (F-15604r1_fix)
Vista/2008 SP2 or Search 4.0 installed: Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Search “Enable indexing uncached Exchange folders” to “Disabled”. Prior to Vista/2008 SP2 or Search 4.0 installation, the policy name is “Prevent indexing uncached Exchange folders” and will be set to “Enabled”. The registry Value Name and Value referenced in the manual check remain the same.

Fix Text (F-15604r1_fix)

Vista/2008 SP2 or Search 4.0 installed:
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Search “Enable indexing uncached Exchange folders” to “Disabled”.

Prior to Vista/2008 SP2 or Search 4.0 installation, the policy name is “Prevent indexing uncached Exchange folders” and will be set to “Enabled”. The registry Value Name and Value referenced in the manual check remain the same.