Detections
Analytics

1.3 EX19-ED-000017

Information

Exchange must have accepted domains configured.

GROUP ID: V-259579
RULE ID: SV-259579r960801

Exchange may be configured to accept email for multiple domain names. This setting identifies the domains for which the server will accept mail. This check verifies the email server is not accepting email for unauthorized domains.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Update the EDSP.

Open the Exchange Management Shell and enter the following command:

Set-AcceptedDomain -Identity <'IdentityName'> -MakeDefault $true

Note: The <IdentityName> value must be in quotes.

See Also

https://workbench.cisecurity.org/benchmarks/23645

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCI|CCI-001368, Rule-ID|SV-259579r960801_rule, STIG-ID|EX19-ED-000017, Vuln-ID|V-259579

Plugin: Windows

Control ID: 88aa04acbe0e3fc858a330ae3d82652b601b477da6420b9c63f20fdf5600032d