STIGQter STIGQter: STIG Summary: Microsoft Windows Server 2025 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

The Windows Server 2025 OpenSSH configuration file must conform to minimum requirements.

DISA Rule

SV-285320r1212175_rule

Vulnerability Number

V-285320

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

WN25-SH-000080

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Maintain the permissions of the "$env:ProgramData/ssh/sshd_config" file as follows:

NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(RX)

Check Contents

If OpenSSH is not installed on the system, this requirement is not applicable.

Verify the permissions of the "$env:ProgramData/ssh/sshd_config" file with the following command:

C:\ > icacls $env:ProgramData/ssh/sshd_config

c:\ProgramData\ssh NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

If the "/etc/ssh/sshd_config" file does not have the default permission as in the example output, this is a finding.

Vulnerability Number

V-285320

Documentable

False

Rule Version

WN25-SH-000080

Severity Override Guidance

If OpenSSH is not installed on the system, this requirement is not applicable.

Verify the permissions of the "$env:ProgramData/ssh/sshd_config" file with the following command:

C:\ > icacls $env:ProgramData/ssh/sshd_config

c:\ProgramData\ssh NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

If the "/etc/ssh/sshd_config" file does not have the default permission as in the example output, this is a finding.

Check Content Reference

M

Target Key

5719