Detections
Analytics

1.127 WN19-CC-000340

Information

Windows Server 2019 must not save passwords in the Remote Desktop Client.

GROUP ID:V-205808
RULE ID:SV-205808r1051080

Saving passwords in the Remote Desktop Client could allow an unauthorized user to establish a remote desktop session to another system. The system must be configured to prevent users from saving passwords in the Remote Desktop Client.

Satisfies: SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPOS-00156

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Remote Desktop Services >> Remote Desktop Connection Client >> 'Do not allow passwords to be saved' to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-205808r1051080_rule, STIG-ID|WN19-CC-000340

Plugin: Windows

Control ID: 12cb3800e7b415cf192a9b528313b5baedf1b90c5019e092106e0b9251dced67