The Internet Printing Protocol (IPP) must be disabled on the IIS 10.0 web server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-218818 | IIST-SV-000149 | SV-218818r961470_rule | CCI-001762 | medium |
| Description | ||||
| The use of IPP on an IIS web server allows client access to shared printers. This privileged access could allow remote code execution by increasing the web servers attack surface. Additionally, since IPP does not support SSL, it is considered a risk and will not be deployed. | ||||
| STIG | Date | |||
| Microsoft IIS 10.0 Server Security Technical Implementation Guide | 2025-06-11 | |||
Related Frameworks
3 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-7(1)
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.4.7
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001762
1.00
- DISA · 3 · disa_xccdf · related
Details
Check Text (C-218818r961470_chk)
If the Print Services role and the Internet Printing role are not installed, this check is Not Applicable.
Navigate to the following directory:
%windir%\web\printers
If this folder exists, this is a finding.
Determine whether Internet Printing is enabled:
Click “Start”, click “Administrative Tools”, and then click “Server Manager”.
Expand the roles node, right-click “Print Services”, and then select “Remove Roles Services”.
If the Internet Printing option is enabled, this is a finding.
Fix Text (F-20288r310930_fix)
Click “Start”, click “Administrative Tools”, and then click “Server Manager”.
Expand the roles node, right-click “Print Services”, and then select “Remove Roles Services”.
If the Internet Printing option is checked, clear the check box, click “Next”, and then click “Remove” to complete the wizard.