Microsoft Windows 11 Security Technical Implementation Guide

The Microsoft Windows 11 Security Technical Implementation Guide (V2 R11) has 257 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

257STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R11

CurrentPublished Wed Sep 30 2026

Simple TCP/IP Services must not be installed on the system.

Microsoft Windows 11 Security Technical Implementation Guide

Assessment Title

Rule Text

Simple TCP/IP Services must not be installed on the system.

Description

Discussion Text

"Simple TCP/IP Services" is not installed by default. Some protocols and services do not support required security features, such as encrypting passwords or traffic.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-253277

Rule

SV-253277r958478_rule

Severity

medium

Rule Version

WN11-00-000110

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify Simple TCP/IP Services has not been installed.

Run "Services.msc".

If "Simple TCP/IP Services" is listed, this is a finding.

Implementation Procedure

Fix Text

Uninstall "Simple TCPIP Services (i.e. echo, daytime etc.)" from the system.

Run "Programs and Features".
Select "Turn Windows Features on or off".
De-select "Simple TCPIP Services (i.e. echo, daytime etc.)".

STIG check 22 of 257 in the Microsoft Windows 11 STIG checklist

← Previous · V-253276Simple Network Management Protocol (SNMP) must not be installed on the system.Next · V-253278 →The Telnet Client must not be installed on the system.