The File System Object component must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-13700	WA000-WI100 IIS7	SV-32708r1_rule	ECSC-1	Medium

Description
Some Component Object Model (COM) components are not required for most applications and should be removed if possible. Most notably, consider disabling the File System Object component; however, this will also remove the Dictionary object. Be aware some programs may require this component (e.g., Commerce Server), so it is highly recommended this be tested completely before implementing on the production web server.

Description

Some Component Object Model (COM) components are not required for most applications and should be removed if possible. Most notably, consider disabling the File System Object component; however, this will also remove the Dictionary object. Be aware some programs may require this component (e.g., Commerce Server), so it is highly recommended this be tested completely before implementing on the production web server.

STIG	Date
IIS 7.0 WEB SERVER STIG	2011-08-19

Details

Check Text ( C-32934r1_chk )
1. Navigate to the following registry keys. If either one of the following keys exist, the FileSystemObject is enabled: HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228} HKEY_CLASSES_ROOT\Scripting.FileSystemObject 2. If the File System Object is registered and is not required for operations, this is a finding. NOTE: If the site has operational reasons to enable "FIleSystemOject", and has supporting documentation signed by the IAO, this is not a finding.

Check Text ( C-32934r1_chk )

1. Navigate to the following registry keys. If either one of the following keys exist, the FileSystemObject is enabled:
HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228}
HKEY_CLASSES_ROOT\Scripting.FileSystemObject

2. If the File System Object is registered and is not required for operations, this is a finding.

NOTE: If the site has operational reasons to enable "FIleSystemOject", and has supporting documentation signed by the IAO, this is not a finding.

Fix Text (F-29076r1_fix)
Run the following command to unregister the File System Object: regsvr32 scrrun.dll /u.