Detections
Analytics

1.181 WN19-DC-000360

Information

Windows Server 2019 Allow log on through Remote Desktop Services user right must only be assigned to the Administrators group on domain controllers.

GROUP ID: V-205666
RULE ID: SV-205666r958472

Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.

Accounts with the 'Allow log on through Remote Desktop Services' user right can access a system through Remote Desktop.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Allow log on through Remote Desktop Services'

to include only the following accounts or groups:

 - Administrators

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-205666r958472_rule, STIG-ID|WN19-DC-000360, Vuln-ID|V-205666

Plugin: Windows

Control ID: 01f9ce8e4008e99b1092f53716999430de38c4a7d6abf18bbd074be751b63e7a