2.13 Set 'Allow access to voicemail without requiring a PIN' to 'False'

Information

Use this setting to ensure PIN access to mailbox data via voice is required.

Rationale:

If PINLess access is enabled, the mailbox data is unsecured and vulnerable to capture when being accessed via the phone

Solution

To implement the recommended state, execute the following PowerShell cmdlet:

Set-UMMailboxPolicy -id MyUMMailboxPolicy -AllowPinlessVoiceMailAccess $false

See Also

https://workbench.cisecurity.org/files/1514

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2

Plugin: Windows

Control ID: a054087a7af33b182bc73a66b32ceb52c75d6198951fc664ee74539a7116c415