UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Microsoft FTP service must not be installed unless required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-26602 WINSV-000101 SV-33725r2_rule Medium
Description
Unnecessary Services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.
STIG Date
Windows Server 2008 R2 Member Server Security Technical Implementation Guide 2018-09-05

Details

Check Text ( C-34148r2_chk )
If the server has the role of an FTP server, this is NA.

Verify the service is not installed or is disabled.

Select "Start".
Select "Run".
Enter "Services.msc".
Respond to any User Account Control prompts.

If the "Microsoft FTP Service" (Service name: msftpsvc) is installed and not disabled, this is a finding.
Fix Text (F-29838r2_fix)
Uninstall or disable the Microsoft FTP Service (msftpsvc) service.