SV-278018r1180760: Windows Server 2025 must not have Bluetooth enabled unless required by the organization. | Microsoft Windows Server 2025 STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Windows Server 2025 must not have Bluetooth enabled unless required by the organization.

Description

Discussion Text

Unnecessary applications and/or services such as Bluetooth could allow an attacker to connect with intentions to take over or disrupt the system.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000382

References

DPMS Target Microsoft Windows Server 2025 DISA DPMS Target Microsoft Windows Server 2025 5719

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# OVAL definition: oval:mil.disa.stig.windows2025:def:278018
if [ ! -e /etc/systemd/system/bthserv.service ] || \
   [ ! $(sed -n '/^Status:/s/.* \(.*\)$/\1/p' /var/log/syslog | grep -q 'bthserv\.service is stopped') ] && \
   [ ! $(sed -n '/^Loaded:/s/.* \(.*\)$/\1/p' /var/log/syslog | grep -q 'bthserv\.service is not-found') ]; then echo "PASS"; exit 0; fi
echo "FAIL"; exit 1

Remediation

Validate the site documentation to ensure the approval of use for Wi-Fi server connections. If the connection has not been approved, type "Services" in the Windows search bar. In the Services "Name " column, look for the "Bluetooth Support Service" and set this to "Disabled". Any Bluetooth devices listed or in use must be documented and approved by the information system security officer (ISSO) or authorizing official (AO).