Exchange must have accepted domains configured.
An XCCDF Rule
Description
<VulnDiscussion>Exchange may be configured to accept email for multiple domain names. This setting identifies the domains for which the server will accept mail. This check verifies the email server is not accepting email for unauthorized domains.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-221204r879533_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Update the EDSP.
Open the Exchange Management Shell and enter the following command:
Set-AcceptedDomain -Identity <'IdentityName'> -MakeDefault $true