Description

Membership in sensitive Exchange groups requires strict control and full justification. Add accounts only when absolutely necessary, evaluating each addition carefully to maintain security. This approach minimizes the risk of unauthorized access and potential security breaches on Exchange servers.

Solution

Restrict to a minimum the membership in sensitive Exchange groups.

See Also

Split permissions in Exchange Server

Indicator Details

Name: Exchange Group Members

Codename: C-EXCHANGE-MEMBERS

Severity: High

MITRE ATT&CK Information: