| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-228358 | CAT II | MONT-MB-002 | Microsoft Exchange 2016 Mailbox Server S... | The Exchange Email Diagnostic log level must be se... | - | |||
Check TextOpen the Exchange Management Shell and enter the following command: Get-EventLogLevel If the Diagnostic of any EventLevel is not set to "Lowest", this is a finding. Fix TextOpen the Exchange Management Shell and enter the following command: Set-EventLogLevel -Identity <'IdentityName\EventlogName'> -Level Lowest Note: The <IdentityName\EventlogName> value must be in single quotes. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025 ResultHash: FE246760DF11AD630D46674989CAFFBEDC086407 ~~~~~ MSExchange ADAccess\Topology EventLevel: Low [Expected Lowest] MSExchange ADAccess\Validation EventLevel: Low [Expected Lowest] MSExchange BackEndRehydration\Configuration EventLevel: Low [Expected Lowest] MSExchange BackEndRehydration\Server EventLevel: 2 [Expected Lowest] MSExchange OAuth\Configuration EventLevel: Low [Expected Lowest] MSExchange OAuth\Server EventLevel: 2 [Expected Lowest] MSExchange RBAC\RBAC EventLevel: Low [Expected Lowest] MSExchangeADTopology\Topology EventLevel: Low [Expected Lowest]
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_MSExchange2016MB_V2R6_20251023-152357.ckl
Scan Date: 2026-01-14T12:57:33.455034
Technology Area: Exchange Server
|
||||||||