The Exchange local machine policy must require signed scripts.
An XCCDF Rule
Description
Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unanticipated system impacts can be avoided.
- ID
- SV-259634r1015764_rule
- Version
- EX19-ED-000198
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Open the Exchange Management Shell and enter the following command:
Set-ExecutionPolicy RemoteSigned