Exchange mail quota settings must not restrict receiving mail.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| low | V-259675 | SRG-APP-000246 | EX19-MB-000122 | SV-259675r961152_rule | 2025-05-14 | 2 |
Description
Mail quota settings control the maximum sizes of a user's mailbox and the system's response if these limits are exceeded. Mailbox data that is not monitored against a quota increases the risk of mail loss due to filled disk space, which can also render the system unavailable.
Failure to allow mail receipt may impede users from receiving mission-critical data.
ℹ️ Check
Open the Exchange Management Shell and enter the following command:
Get-MailboxDatabase | Select-Object -Property Name, Identity, ProhibitSendReceiveQuota
If the value of "ProhibitSendReceiveQuota" is not set to "Unlimited", this is a finding.
or
If the value of "ProhibitSendReceiveQuota" is set to an alternate value and has signoff and risk acceptance in the EDSP, this is not a finding.
✔️ Fix
Open the Exchange Management Shell and enter the following command:
Set-MailboxDatabase -Identity <'IdentityName'> -ProhibitSendReceiveQuota Unlimited
Note: The <IdentityName> value must be in quotes.
or
Enter the value as identified by the EDSP that has obtained a signoff with risk acceptance.