Windows OS: Must not have the Fax Server role installed


Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption or may provide unauthorized access to the system.


To fix this uninstall the "Fax Server" role.

  • Start "Server Manager".
  • Select the server with the role.
  • Scroll down to "ROLES AND FEATURES" in the right pane.
  • Select "Remove Roles and Features" from the drop-down "TASKS" list.
  • Select the appropriate server on the "Server Selection" page and click "Next".
  • Deselect "Fax Server" on the "Roles" page.
  • Click "Next" and "Remove" as prompted.

Stig: Server 2019:
Server 2016: