Detections
Analytics

1.161 WN11-CC-000280

Information

Remote Desktop Services must always prompt a client for passwords upon connection.

GROUP ID: V-253404
RULE ID: SV-253404r1051052

This setting controls the ability of users to supply passwords automatically as part of their remote desktop connection. Disabling this setting would allow anyone to use the stored credentials in a connection item to connect to the terminal server.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Remote Desktop Services >> Remote Desktop Session Host >> Security >> 'Always prompt for password upon connection'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CCI|CCI-002038, Rule-ID|SV-253404r1051052_rule, STIG-ID|WN11-CC-000280, Vuln-ID|V-253404

Plugin: Windows

Control ID: 36f9463c4083d4b4835ae44bc4d06f6fe165da93dccca01163295531878e6763