V-33615
Message Tracking Logging must be enabled.
Finding ID
Exch-1-808
Rule ID
SV-44035r1_rule
Severity
CCE
(None)
Group Title
Exch-1-808
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
A message tracking log provides a detailed log of all message activity as messages are transferred to and from a computer running Exchange. If events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.
Fix Text
Open the Exchange Management Shell and enter the following command:
Set-MailboxServer -Identity <<'ServerName'> -MessageTrackingLogEnable $True
Check Content
Open the Exchange Management Shell and enter the following command: Get-MailboxServer | Select Name, Identity, MessageTrackingLogEnabled If the value of 'MessageTrackingLogEnabled' is not set to 'True', this is a finding.
IA Controls
ECSC-1