Microsoft Windows Server 2025 Security Technical Implementation Guide

The Microsoft Windows Server 2025 Security Technical Implementation Guide (V1 R4) has 291 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

291STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Sep 30 2026

Windows Server 2025 must not have Bluetooth enabled unless required by the organization.

Microsoft Windows Server 2025 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows Server 2025 must not have Bluetooth enabled unless required by the organization.

Description

Discussion Text

Unnecessary applications and/or services such as Bluetooth could allow an attacker to connect with intentions to take over or disrupt the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-278018

Rule

SV-278018r1180760_rule

Severity

medium

Rule Version

WN25-00-000333

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

In the Windows search bar, type "Services". In the Services "Name" column look for the "Bluetooth Support Service". If this is set to "automatic", this is a finding.

Implementation Procedure

Fix Text

Validate the site documentation to ensure the approval of use for Wi-Fi server connections. If the connection has not been approved, type "Services" in the Windows search bar. In the Services "Name " column, look for the "Bluetooth Support Service" and set this to "Disabled". Any Bluetooth devices listed or in use must be documented and approved by the information system security officer (ISSO) or authorizing official (AO).

STIG check 35 of 291 in the Microsoft Windows Server 2025 STIG checklist

← Previous · V-278017Windows Server 2025 must not have Wi-Fi enabled unless required by the organization.Next · V-278019 →Windows Server 2025 must not have the Peer Name Resolution Protocol installed.