Detections
Analytics

SHPT-00-000475 - To support the requirements and principles of least functionality; SharePoint must support the organizational requirement to provide only essential capabilities.

Information

Information systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).

Additionally, it is sometimes convenient to provide multiple services from a single component of an information system, but doing so increases risk over limiting the services provided by any one component.

Services not necessary to the SharePoint installation must not be installed on the servers in the farm.

Solution

Follow these steps to access the management pages of a service application by using Central Administration.
1. Navigate to the Central Administration home page.
2. In the Application Management section, click Manage Service Applications.
3. From the Manage Service Applications page, select the service application to be removed.
4. Remove all services that are not needed or approved for use by the organization.

See Also

https://iasecontent.disa.mil/stigs/zip/U_MS_SharePoint_2010_V1R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-37768r1_rule, STIG-ID|SHPT-00-000475, Vuln-ID|V-28169

Plugin: Windows

Control ID: 185b276b18845b7f8c2a68aa5e5c5fca5f0b5a1cbcbdb651445d1e8d3ac9a78a