UCF STIG Viewer Logo

Exchange must not send auto replies to remote domains.


Overview

Finding ID Version Rule ID IA Controls Severity
Exch-ED-224 Exch-ED-224 Exch-ED-224_rule Medium
Description
Attackers can use automated messages to determine whether a user account is active, in the office, traveling, and so on. An attacker might use this information to conduct future attacks. Remote users will not receive automated Out-Of-Office delivery reports. This setting can be used to determine if all the servers in the Organization can send Out-of-Office messages.
STIG Date
Microsoft Exchange 2010 Edge Transport Server Role 2012-05-31

Details

Check Text ( C-_chk )
Open the Exchange Management Shell and enter the following command.

Get-RemoteDomain | select identity, AutoReplyEnabled

If the value of "AutoReplyEnabled" is set to "True", this is a finding.
Fix Text (F-_fix)
Open the Exchange Management Shell and enter the following command.

Set-RemoteDomain -Identity <'RemoteDomainName'> -AutoReplyEnabled $false