The Exchange local machine policy must require signed scripts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-259634 | EX19-ED-000198 | SV-259634r1015764_rule | Medium |
| Description |
| Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided. |
| STIG | Date |
| Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide | 2024-12-06 |
Details
| Check Text (C-63373r942214_chk) |
| Open the Exchange Management Shell and enter the following command: Get-ExecutionPolicy If the value returned is not "RemoteSigned", this is a finding. |
| Fix Text (F-63281r942215_fix) |
| Open the Exchange Management Shell and enter the following command: Set-ExecutionPolicy RemoteSigned |