Free DISA STIG and SRG Library | Vaulted

V-33597

The Mailbox Stores must mount at startup.

Finding ID
Exch-1-309
Rule ID
SV-44017r1_rule
Severity
Cat III
CCE
(None)
Group Title
Exch-1-309
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Administrator responsibilities include the ability to react to unplanned maintenance tasks or emergency situations that may require Mailbox data manipulation. Occasionally, there may be a need to start the server with 'unmounted' data stores, if manual maintenance is being performed on them. Failure to uncheck the 'do not mount on startup' condition will result in unavailability of mail services. Correct configuration of this control will prevent unplanned outages due to being enabled. On occasions when it is needed, care should be taken in process steps to clear the check box upon task completion, so that mail stores are available to users (unmounted mailbox stores are not available to users).

Fix Text

Open the Exchange Management Shell and enter the following command: Set-MailboxDatabase -Identity &lt;<'MailboxName'> -MountAtStartup $true

Check Content

Open the Exchange Management Shell and enter the following command: Get-MailboxDatabase | Select Name, Identity, MountAtStartup If the value of 'MountAtStartup' is not set to 'True', this is a finding.

IA Controls

ECSC-1