← Back to Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

V-259634

CAT II (Medium)

The Exchange local machine policy must require signed scripts.

Rule ID

SV-259634r1015764_rule

STIG

Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-003938 CCI-001814

Discussion

Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided.

Check Content

Open the Exchange Management Shell and enter the following command:

Get-ExecutionPolicy

If the value returned is not "RemoteSigned", this is a finding.

Fix Text

Open the Exchange Management Shell and enter the following command:

Set-ExecutionPolicy RemoteSigned