Windows Vista Security Technical Implementation Guide

The Windows Vista Security Technical Implementation Guide (V6 R42) has 251 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

251STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R42

CurrentPublished Fri Apr 28 2017

Internet Information System (IIS) or its subcomponents are installed on a workstation.

Windows Vista Security Technical Implementation Guide

Assessment Title

Rule Text

Internet Information System (IIS) or its subcomponents are installed on a workstation.

Description

Discussion Text

This is a Category 1 finding because not removing these services may allow unauthorized internet services to be hosted. Web sites should only be hosted on servers that have been designed for that purpose and can be adequately secured.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-3347

Rule

SV-29706r1_rule

Severity

high

Rule Version

5.016

Documentable

true

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Select "Start"
Select "Control Panel"
Select the "Add or Remove Programs" applet.
Select "Add/Remove Windows Components".

If the entry for "Internet Information Services" is checked, then this is a finding.

Documentable Explanation:  If an application requires IIS or a subset to be installed to function, this needs be documented with the IAO.  In addition, any applicable requirements from the Web Checklist must be addressed.

Implementation Procedure

Fix Text

Configure the system to remove "Internet Information Services".

STIG check 172 of 251 in the Windows Vista STIG checklist

← Previous · V-3344The use of local accounts with blank passwords is not restricted to console logons only.Next · V-3348 →The user is allowed to launch Windows Messenger (MSN Messenger, .NET Messenger).