Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-26602 | WINSV-000101 | SV-33725r1_rule | ECSC-1 | Medium |
Description |
---|
Unnecessary Services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption. |
STIG | Date |
---|---|
Windows Server 2008 R2 Member Server Security Technical Implementation Guide | 2014-04-02 |
Check Text ( C-34148r1_chk ) |
---|
Verify the service is not installed or is disabled. Select “Start”. Select “Run”. Enter "Services.msc" in the run box. Respond to any User Account Control prompts. If the following is installed and not disabled, this is a finding: Microsoft FTP Service (msftpsvc) |
Fix Text (F-29838r1_fix) |
---|
Remove or disable the Microsoft FTP Service (msftpsvc) service. |