| NaN |
Version: 5.20120314 |
NaN |
NaN |
NaN |
NaN |
| CCE ID |
CCE Description |
CCE Parameters |
CCE Technical Mechanisms |
|
Microsoft Security Compliance Manager (SCM) Baselines and Settings Packs |
| CCE-19141-1 |
The "Allow access to voicemail without requiring a PIN" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType PinlessAccessToVoicemail |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19132-0 |
The "Allow basic authentication" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AllowBasicAuthentication |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18357-4 |
The "Allow simple passwords" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AllowSimplePasswords |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18866-4 |
The "Allow unmanaged devices" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AllowUnmanagedDevices |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19115-5 |
The "Configure dial plan security" setting should be configured correctly. |
Unsecured, SIPSecured, Secured |
(1) Powershell: Get-ExchangeConfiguration -configType DialPlanSecure |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18176-8 |
The "Configure login authentication for IMAP4" setting should be configured correctly. |
PlainTextLogin, PlainTextAuthentication, SecureLogin |
(1) Powershell: Get-ExchangeConfiguration -configType IMAP4LoginType |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19077-7 |
The "Configure login authentication for POP3" setting should be configured correctly. |
PlainTextLogin, PlainTextAuthentication, SecureLogin |
(1) Powershell: Get-ExchangeConfiguration -configType POP3LoginType |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18924-1 |
The "Configure Protocol logging" setting should be configured correctly. |
Verbose, None |
(1) Powershell: Get-ExchangeConfiguration -configType ProtocolLogging |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18693-2 |
The "Configure Sender Filtering" setting should be configured correctly. |
StampStatus, Reject |
(1) Powershell: Get-ExchangeConfiguration -configType SenderFiltering |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18710-4 |
The "Configure startup mode" setting should be configured correctly. |
TCP, Dual, TLS |
(1) Powershell: Get-ExchangeConfiguration -configType UMStartupMode |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18273-3 |
The "Do not permamently delete items until the database has been backed up" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType RetainDeletedItemsUntilBackup |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18842-5 |
The "Enable automatic forwards to remote domains" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AutomaticForwardsRemoteDomains |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19131-2 |
The "Enable automatic replies to remote domains" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AutomaticRepliesRemoteDomains |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19057-9 |
The "Enable non-delivery reports to remote domains" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType NonDeliveryReportsRemoteDomains |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19022-3 |
The "Enable OOF messages to remote domains" setting should be configured correctly. |
External, ExternalLegacy, None, and InternalLegacy |
(1) Powershell: Get-ExchangeConfiguration -configType OofMessagesRemoteDomains |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19096-7 |
The "Enable S/MIME for OWA 2010" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType SMimeEnabled2010 |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18208-9 |
The "Enable Sender ID agent" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType SenderID |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18326-9 |
The "Enable Sender Reputation" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType SenderReputation |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19013-2 |
The "Enforce Password History" setting should be configured correctly. |
0-50 passwords |
(1) Powershell: Get-ExchangeConfiguration -configType EnforcePasswordHistory |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19081-9 |
The "External send connector authentication: DNS Routing" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType ExternalSendConnectorAuthDNSRoutingEnabled |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18182-6 |
The "External send connector authentication: Domain Security" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType ExternalSendConnectorAuthDomainSecureEnabled |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18214-7 |
The "External send connector authentication: Ignore Start TLS" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType ExternalSendConnectorAuthIgnoreSTARTTLS |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19076-9 |
The "Keep deleted mailboxes for the specified number of days" setting should be configured correctly. |
0 - 24855 days |
(1) Powershell: Get-ExchangeConfiguration -configType KeepDeletedMailboxes |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18662-7 |
The "Mailbox quotas: Issue warning at" setting should be configured correctly. |
0 - 2147483647 KB |
(1) Powershell: Get-ExchangeConfiguration -configType MailboxApproachingStorageLimitWarning |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18281-6 |
The "Mailbox quotas: Prohibit send and receive at" setting should be configured correctly. |
0 - 2147483647 KB |
(1) Powershell: Get-ExchangeConfiguration -configType ProhibitSendReceiveQuota |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18515-7 |
The "Mailbox quotas: Prohibit send at" setting should be configured correctly. |
0 - 2147483647 KB |
(1) Powershell: Get-ExchangeConfiguration -configType ProhibitSendQuota |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18506-6 |
The "Maximum number of recipients - organization level" setting should be configured correctly. |
0 - 2147483647 recipients |
(1) Powershell: Get-ExchangeConfiguration -configType MaximumNumberRecipients |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19113-0 |
The "Maximum receive size - connector level" setting should be configured correctly. |
64 - 2147483647 KB |
(1) Powershell: Get-ExchangeConfiguration -configType MaximumReceiveSizeConnector |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19010-8 |
The "Maximum receive size - organization level" setting should be configured correctly. |
0 - 2097151 KB |
(1) Powershell: Get-ExchangeConfiguration -configType MaximumReceiveSizeOrganization |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18590-0 |
The "Maximum send size - connector level" setting should be configured correctly. |
64 - 2147483647 KB |
(1) Powershell: Get-ExchangeConfiguration -configType MaximumSendSizeConnector |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19156-9 |
The "Maximum send size - organization level" setting should be configured correctly. |
0 - 2097151 KB |
(1) Powershell: Get-ExchangeConfiguration -configType MaximumSendSizeOrganization |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18647-8 |
The "Message tracking logging - Mailbox" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType MessageTrackingLoggingMailbox |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19094-2 |
The "Message tracking logging - Transport" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType MessageTrackingLoggingTransport |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18530-6 |
The machine setting for the startup type of the "Microsoft Exchange Active Directory Topology" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Active Directory Topology (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeADTopology\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19176-7 |
The machine setting for the startup type of the "Microsoft Exchange ADAM" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange ADAM (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ADAM_MSExchange\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18189-1 |
The machine setting for the startup type of the "Microsoft Exchange Address Book" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Address Book (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeAB\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19179-1 |
The machine setting for the startup type of the "Microsoft Exchange Anti-spam Update" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Anti-spam Update (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeAntispamUpdate\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19126-2 |
The machine setting for the startup type of the "Microsoft Exchange Credential Service (Exchange 2010)" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Credential Service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeEdgeCredential\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19164-3 |
The machine setting for the startup type of the "Microsoft Exchange EdgeSync Service" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange EdgeSync Service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeEdgeSync\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18421-8 |
The machine setting for the startup type of the "Microsoft Exchange File Distribution" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange File Distribution (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeFDS\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19181-7 |
The machine setting for the startup type of the "Microsoft Exchange Forms-Based Authentication service" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Forms-Based Authentication service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeFBA\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18945-6 |
The machine setting for the startup type of the "Microsoft Exchange IMAP4" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange IMAP4 (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIMAP4\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18199-0 |
The machine setting for the startup type of the "Microsoft Exchange Information Store" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Information Store (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18635-3 |
The machine setting for the startup type of the "Microsoft Exchange Mail Submission Service" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Mail Submission Service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeMailSubmission\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19083-5 |
The machine setting for the startup type of the "Microsoft Exchange Mailbox Assistants" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Mailbox Assistants (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeMailboxAssistants\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19066-0 |
The machine setting for the startup type of the "Microsoft Exchange Mailbox Replication" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Mailbox Replication (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeMailboxReplication\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19100-7 |
The machine setting for the startup type of the "Microsoft Exchange Monitoring" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Monitoring (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeMonitoring\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18778-1 |
The machine setting for the startup type of the "Microsoft Exchange POP3" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange POP3 (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangePOP3\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18352-5 |
The machine setting for the startup type of the "Microsoft Exchange Protected Service Host" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Protected Service Host (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeProtectedServiceHost\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18595-9 |
The machine setting for the startup type of the "Microsoft Exchange Replication Service" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Replication Service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeRepl\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19101-5 |
The machine setting for the startup type of the "Microsoft Exchange RPC Client Access" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange RPC Client Access (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeRPC\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19031-4 |
The machine setting for the startup type of the "Microsoft Exchange Search Indexer" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Search Indexer (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSearch\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18203-0 |
The machine setting for the startup type of the "Microsoft Exchange Server Extension for Windows Server Backup" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Server Extension for Windows Server Backup (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wsbexchange\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19109-8 |
The machine setting for the startup type of the "Microsoft Exchange Service Host" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Service Host (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeServiceHost\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19136-1 |
The machine setting for the startup type of the "Microsoft Exchange Speech Engine Service" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Speech Engine Service (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSSpeechService\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18212-1 |
The machine setting for the startup type of the "Microsoft Exchange System Attendant" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange System Attendant (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19201-3 |
The machine setting for the startup type of the "Microsoft Exchange Throttling" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Throttling (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeThrottling\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18234-5 |
The machine setting for the startup type of the "Microsoft Exchange Transport" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Transport (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeTransport\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19208-8 |
The machine setting for the startup type of the "Microsoft Exchange Transport Log Search" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Transport Log Search (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeTransportLogSearch\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19121-3 |
The machine setting for the startup type of the "Microsoft Exchange Unified Messaging" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Unified Messaging (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeUM\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18373-1 |
The machine setting for the startup type of the "Microsoft Search (Exchange)" service should be configured correctly. |
Automatic = 2, Manual=3, Disabled=4 |
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Search (Exchange) (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msftesql-Exchange\Start |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18241-0 |
The "Minimum password length" setting should be configured correctly. |
1 to 16 characters |
(1) Powershell: Get-ExchangeConfiguration -configType MinimumPasswordLength |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19042-1 |
The "Mount database at startup" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType MountDatabaseAtStartup |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19190-8 |
The "Number of attempts allowed" setting should be configured correctly. |
4 - 16 Attempts |
(1) Powershell: Get-ExchangeConfiguration -configType NumberAttemptsAllowed |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19215-3 |
The "Password Expiration" setting should be configured correctly. |
1:00:00:00 - 730:00:00:00 Days |
(1) Powershell: Get-ExchangeConfiguration -configType PasswordExpiration |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19091-8 |
The "Refresh interval" setting should be configured correctly. |
0 - 596523 Hours |
(1) Powershell: Get-ExchangeConfiguration -configType RefreshInterval |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19177-5 |
The "Require alphanumeric password" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType RequireAlphanumericPassword |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19221-1 |
The "Require Client Certificates" setting should be configured correctly. |
Ignore, Accepted, or Required |
(1) Powershell: Get-ExchangeConfiguration -configType RequireClientCertificates |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18242-8 |
The "Require client MAPI encryption" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType RequireClientMAPIEncryption |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19202-1 |
The "Require encryption on device" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType RequireEncryptionOnDevice |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19162-7 |
The "Require password" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType RequirePassword |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19241-9 |
The "Retain deleted items for the specified number of days" setting should be configured correctly. |
0 - 30 Days |
(1) Powershell: Get-ExchangeConfiguration -configType DeletedItemRetention |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-18432-5 |
The "Time without user input before password must be re-entered" setting should be configured correctly. |
1 - 60 Minutes |
(1) Powershell: Get-ExchangeConfiguration -configType MaxInactivityTimeDeviceLock |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19153-6 |
The "Turn on Administrator Audit Logging" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType AdministratorAuditLogging |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19219-5 |
The "Turn on Connectivity logging" setting should be configured correctly. |
True/False |
(1) Powershell: Get-ExchangeConfiguration -configType ConnectivityLogging |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |
| CCE-19240-1 |
The "Turn on script execution" setting should be configured correctly. |
Restricted/ AllSigned/ RemoteSigned/ Unrestricted |
(1) Powershell: Get-ExchangeConfiguration -configType ExecutionPolicy |Select-Object -Property SettingData |
NaN |
Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2010 SP2 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID |