Detections
Analytics

1.160 WN11-CC-000275

Information

Local drives must be prevented from sharing with Remote Desktop Session Hosts.

GROUP ID: V-253403
RULE ID: SV-253403r1137695

Preventing users from sharing the local drives on their client computers to Remote Session Hosts that they access helps reduce possible exposure of sensitive data.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Remote Desktop Services >> Remote Desktop Session Host >> Device and Resource Redirection >> 'Do not allow drive redirection'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CCI|CCI-001090, Rule-ID|SV-253403r1137695_rule, STIG-ID|WN11-CC-000275, Vuln-ID|V-253403

Plugin: Windows

Control ID: cfb530c0c933356c197d1a0fb4f1a0d929be89729326401f1b3ef791678fa8f5