The Microsoft FTP service must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-26602 | WINSV-000101 | SV-33725r2_rule | Medium |
| Description |
|---|
| Unnecessary Services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption. |
| STIG | Date |
|---|---|
| Windows Server 2008 R2 Member Server Security Technical Implementation Guide | 2019-06-18 |
Details
| Check Text ( C-34148r2_chk ) |
|---|
| If the server has the role of an FTP server, this is NA. Verify the service is not installed or is disabled. Select "Start". Select "Run". Enter "Services.msc". Respond to any User Account Control prompts. If the "Microsoft FTP Service" (Service name: msftpsvc) is installed and not disabled, this is a finding. |
| Fix Text (F-29838r2_fix) |
|---|
| Uninstall or disable the Microsoft FTP Service (msftpsvc) service. |