STIGQter: STIG Summary: Microsoft Windows Server 2025 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

Windows Server 2025 must not have Simple TCP/IP Services installed.

DISA Rule

SV-278020r1180766_rule

Vulnerability Number

V-278020

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

WN25-00-000350

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Uninstall the "Simple TCP/IP Services" feature.

Start Server Manager.

Select the server with the feature.

Scroll down to "ROLES AND FEATURES" in the right pane.

Select "Remove Roles and Features" from the drop-down "TASKS" list.

Select the appropriate server on the "Server Selection" page and click "Next".

Deselect "Simple TCP/IP Services" on the "Features" page.

Click "Next" and "Remove" as prompted.

Check Contents

Open PowerShell.

Enter "Get-WindowsFeature | Where Name -eq Simple-TCPIP".

If "Installed State" is "Installed", this is a finding.

An Installed State of "Available" or "Removed" is not a finding.

Vulnerability Number

V-278020

Documentable

False

Rule Version

WN25-00-000350

Severity Override Guidance

Open PowerShell.

Enter "Get-WindowsFeature | Where Name -eq Simple-TCPIP".

If "Installed State" is "Installed", this is a finding.

An Installed State of "Available" or "Removed" is not a finding.

Check Content Reference

M

Target Key

5719