The machine setting for the startup type of the "Microsoft Exchange Search Indexer" service should be configured correctly. Automatic = 2, Manual=3, Disabled=4 (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Microsoft Exchange Search Indexer (2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSearch\Start Microsoft Tool: Security Compliance Manager (SCM) Microsoft Baseline: Exchange Server 2007 SP3 1.0 SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 Note, use SCM global search and baseline filter to locate settings related to CCE ID oval:org.secpod.oval:def:10360 Microsoft Security Compliance Manager (SCM) Baselines and Settings Packs Microsoft SCAP Repo OVAL Definition 2013-03-26