| 1. Display the programs that are running on the directory server by starting the Services console (Start, Run, "services.msc"). |
2. Determine if any running programs are application components. Check if any application-related services have the “Started” status.
Examples of some services that indicate the presence of applications are:
- DHCP Server for DHCP server
- IIS Admin Service for IIS web server
- Microsoft Exchange System Attendant for Exchange
- MSSQLServer for SQL Server.
3. If any application-related components have the “Started” status, then this is a finding.
Any Domain Name System (DNS) server that is integrated with the directory server (e.g., AD-integrated DNS) *is* an acceptable application. However, the DNS server must comply with the DNS STIG security requirements.
Some directory servers utilize specialized web servers for administrative functions and databases for data management. These web and database servers are permitted as long as they are *dedicated* to directory server support and only administrative users have access to them.