← Back to Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

V-259583

CAT II (Medium)

Exchange message tracking logging must be enabled.

Rule ID

SV-259583r960900_rule

STIG

Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000133

Discussion

A message tracking log provides a detailed log of all message activity as messages are transferred to and from a computer running Exchange. If events are not recorded, it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.

Check Content

Open the Exchange Management Shell and enter the following command:

Get-Transportservice | Select-Object -Property Name, MessageTrackingLogEnabled

If the value of "MessageTrackingLogEnabled" is not set to "True", this is a finding.

Fix Text

Open the Exchange Management Shell and enter the following command:

Set-Transportservice <IdentityName> -MessageTrackingLogEnabled $true

Note: The <IdentityName> value must be in quotes.