Skip to main content
CUI

Vulnerability V-228404

Back
Back to Ships

V-228404

CAT II

Exchange Outlook Anywhere clients must use NTLM authentication to access email.

Ships Affected
1
Total Findings
1
Open
1
Closed
0

Check Text

Open the Exchange Management Shell and enter the following command: Get-OutlookAnywhere Get-OutlookAnywhere | Select Name, Identity, InternalClientAuthenticationMethod, ExternalClientAuthenticationMethod If the value of "InternalClientAuthenticationMethod" and the value of "ExternalClientAuthenticationMethod" are not set to NTLM, this is a finding.

Fix Text

Open the Exchange Management Shell and enter the following command: For InternalClientAuthenticationMethod: Set-OutlookAnywhere -Identity '<IdentityName'> -InternalClientAuthenticationMethod NTLM For ExternalClientAuthenticationMethod: Set-OutlookAnywhere -Identity '<IdentityName'> -ExternalClientAuthenticationMethod NTLM

STIG Reference

STIG
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
Version
2
Release
6
Rule ID
SV-228404r879764_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_MSExchange2016MB_V2R6_20251023-152357.ckl
Unassigned 2026-01-14T12:57:33.455034 View in Context
CUI