Description:
Verifies that contact folders are not shared with all domains.
Why:
Contact folders may contain information that should not be shared by default with all domains. Disabling sharing with all domains closes an avenue for data exfiltration while still allowing for specific legitimate use as needed.
Configured: Contact folders are not shared with all domains.
Not Configured: Contact folders are shared with all domains.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: Works with Basic licensing
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
CISA SCuBA — MS.EXO.6.1
Microsoft documentation: