V-218793
Microsoft IIS 10.0 Server Security Technical Implementation Guide
Title
The IIS 10.0 web server must only contain functions necessary for operation.
Description
<VulnDiscussion>A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too unsecure to run on a production DoD system. The web server must provide the capability to disable, uninstall, or deactivate functionality and services deemed non-essential to the web server mission or that adversely impact server performance.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations...
Fix Text (Documentation Requirement)
Remove all unapproved programs and roles from the production IIS 10.0 web server.