Navigate

Check: WN11-00-000110

Microsoft Windows 11 STIG: WN11-00-000110 (in versions v2 r2 through v1 r1)

Title

Simple TCP/IP Services must not be installed on the system. (Cat II impact)

Discussion

"Simple TCP/IP Services" is not installed by default. Some protocols and services do not support required security features, such as encrypting passwords or traffic.

Check Content

Verify Simple TCP/IP Services has not been installed. Run "Services.msc". If "Simple TCP/IP Services" is listed, this is a finding.

Fix Text

Uninstall "Simple TCPIP Services (i.e. echo, daytime etc.)" from the system. Run "Programs and Features". Select "Turn Windows Features on or off". De-select "Simple TCPIP Services (i.e. echo, daytime etc.)".

Additional Identifiers

Rule ID: SV-253277r958478_rule

Vulnerability ID: V-253277

Group Title: SRG-OS-000095-GPOS-00049

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000381	Configure the system to provide only organization-defined mission essential capabilities.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-7	Least Functionality