The File System Object component must be disabled on the IIS 8.5 web server.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-76767	IISW-SV-000157	SV-91463r1_rule		Medium

Description
Some Component Object Model (COM) components are not required for most applications and should be removed if possible. Most notably, consider disabling the File System Object component; however, this will also remove the Dictionary object. Be aware some programs may require this component (e.g., Commerce Server), so it is highly recommended this be tested completely before implementing on the production web server.

Description

Some Component Object Model (COM) components are not required for most applications and should be removed if possible. Most notably, consider disabling the File System Object component; however, this will also remove the Dictionary object. Be aware some programs may require this component (e.g., Commerce Server), so it is highly recommended this be tested completely before implementing on the production web server.

STIG	Date
IIS 8.5 Server Security Technical Implementation Guide	2018-01-03

Details

Check Text ( C-76423r1_chk )
Locate the HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228} registry key. If the key exist, the File System Object component is enabled. If the File System Object component is enabled and is not required for operations, this is a finding. Note: If the File System Object component is required for operations and has supporting documentation signed by the ISSO, this is not a finding.

Check Text ( C-76423r1_chk )

Locate the HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228} registry key.

If the key exist, the File System Object component is enabled.

If the File System Object component is enabled and is not required for operations, this is a finding.

Note: If the File System Object component is required for operations and has supporting documentation signed by the ISSO, this is not a finding.

Fix Text (F-83463r1_fix)
Run the following command, with administrator privileges, to unregister the File System Object: regsvr32 scrrun.dll /u.