Exchange must not send delivery reports to remote domains.
An XCCDF Rule
Description
<VulnDiscussion>Attackers can use automated messages to determine whether a user account is active, in the office, traveling, and so on. An attacker might use this information to conduct future attacks. Ensure that delivery reports to remote domains are disabled. Before enabling this setting first configure a remote domain using the EMC or the New-RemoteDomain cmdlet.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls>ECSC-1</IAControls>
- ID
- SV-44018r1_rule
- Severity
- Medium
- Updated
Remediation - Manual Procedure
Open the Exchange Management Shell and enter the following command:
Set-RemoteDomain -Identity <'RemoteDomainName'> -DeliveryReportEnabled $false