Detections
Analytics

1.159 WN11-CC-000270

Information

Passwords must not be saved in the Remote Desktop Client.

GROUP ID: V-253402
RULE ID: SV-253402r1051051

Saving passwords in the Remote Desktop Client could allow an unauthorized user to establish a remote desktop session to another system. The system must be configured to prevent users from saving passwords in the Remote Desktop Client.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Remote Desktop Services >> Remote Desktop Connection Client >> 'Do not allow passwords to be saved'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CCI|CCI-002038, Rule-ID|SV-253402r1051051_rule, STIG-ID|WN11-CC-000270, Vuln-ID|V-253402

Plugin: Windows

Control ID: 79f86c5a148ddff4b5f17b57e843a8befdd89d99c048d26f1538ca0b1c647f56