STIGQter: STIG Summary: Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

The Exchange email application must not share a partition with another application.

DISA Rule

SV-259704r961608_rule

Vulnerability Number

V-259704

Group Title

SRG-APP-000431

Rule Version

EX19-MB-000229

Severity

CAT II

CCI(s)

• CCI-002530 - Maintain a separate execution domain for each executing system process.

Weight

10

Fix Recommendation

Update the EDSP with the location of where Exchange is installed.

Install Exchange on a dedicated application directory or partition separate than that of the operating system.

Check Contents

Review the Email Domain Security Plan (EDSP).

Determine if the directory Exchange is installed:

1. Open Windows Explorer.
2. Navigate to where Exchange is installed.

If Exchange resides on a directory or partition other than that of the operating system and does not have other applications installed (unless approved by the Information System Security Officer [ISSO]), this is not a finding.

Vulnerability Number

V-259704

Documentable

False

Rule Version

EX19-MB-000229

Severity Override Guidance

Review the Email Domain Security Plan (EDSP).

Determine if the directory Exchange is installed:

1. Open Windows Explorer.
2. Navigate to where Exchange is installed.

If Exchange resides on a directory or partition other than that of the operating system and does not have other applications installed (unless approved by the Information System Security Officer [ISSO]), this is not a finding.

Check Content Reference

M

Target Key

5580