The Exchange local machine policy must require signed scripts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-259634 | EX19-ED-000198 | SV-259634r942216_rule | Medium |
| Description |
|---|
| Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided. |
| STIG | Date |
|---|---|
| Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide | 2024-01-10 |
Details
| Check Text ( C-63373r942214_chk ) |
|---|
| Open the Exchange Management Shell and enter the following command: Get-ExecutionPolicy If the value returned is not "RemoteSigned", this is a finding. |
| Fix Text (F-63281r942215_fix) |
|---|
| Open the Exchange Management Shell and enter the following command: Set-ExecutionPolicy RemoteSigned |