The Exchange local machine policy must require signed scripts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-259634	EX19-ED-000198	SV-259634r1015764_rule		Medium

Description

Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided.

STIG	Date
Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide	2024-12-06

Details

Check Text (C-63373r942214_chk)

Open the Exchange Management Shell and enter the following command:

Get-ExecutionPolicy

If the value returned is not "RemoteSigned", this is a finding.

Fix Text (F-63281r942215_fix)

Open the Exchange Management Shell and enter the following command:

Set-ExecutionPolicy RemoteSigned