Free DISA STIG and SRG Library | Vaulted

V-33577

The Public Folder Stores must mount at startup.

Finding ID
Exch-1-109
Rule ID
SV-43997r1_rule
Severity
Cat III
CCE
(None)
Group Title
Exch-1-109
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Administrator responsibilities include the ability to react to unplanned maintenance tasks or emergency situations that may require Public Folder Store data manipulation. Occasionally, there may be a need to start the server with 'unmounted' data stores, if manual maintenance is being performed on them. Failure to uncheck the 'do not mount on startup' condition will result in unavailability of Public Folder services. Correct configuration of this control will prevent unplanned outages due to being enabled. On occasions when it is needed, care should be taken in process steps to clear the checkbox task completion, so that public folder stores are available to users (unmounted public folder stores are not available to users).

Fix Text

Open the Exchange Management Shell and enter the following command: Set-PublicFolderDatabase -Identity &lt;<'PublicFolderName'> -MountAtStartup $true

Check Content

If public folders are not used this check is NA. Open the Exchange Management Shell and enter the following command: Get-PublicFolderDatabase | Select Name, Identity, MountAtStartup If the value of 'MountAtStartup' is not set to 'True', this is a finding.

IA Controls

ECSC-1