The Microsoft FTP service must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-26602 | WN12-SV-000101 | SV-52237r2_rule | ECSC-1 | Medium |
| Description |
|---|
| Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption. |
| STIG | Date |
|---|---|
| Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide | 2014-12-18 |
Details
| Check Text ( C-46975r1_chk ) |
|---|
| Verify the Microsoft FTP (msftpsvc) service is not installed or is disabled. Run "Services.msc". If the following is installed and not disabled, this is a finding: Microsoft FTP Service (msftpsvc) |
| Fix Text (F-45252r1_fix) |
|---|
| Remove or disable the Microsoft FTP Service (msftpsvc) service. |