Detections
Analytics
5.043 - Terminal Services is not configured with the client connection encryption set to the required level.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Remote connections must be encrypted to prevent interception of data or sensitive information. Selecting 'High Level' will ensure encryption of Terminal Services sessions in both directions.Solution
2008 - Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services ->Terminal Server -> Security 'Set Client Connection Encryption Level' will be set to 'Enabled' and select 'High Level' for the 'Encryption Level'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2008_DC_V6R47_STIG.zip
Item Details
Audit Name: DISA Windows Server 2008 DC STIG v6r47
Category: ACCESS CONTROL
References: 800-53|AC-17(2), CAT|II, CCI|CCI-000068, CCI|CCI-002890, CSCv6|3.4, Rule-ID|SV-16953r2_rule, STIG-ID|5.043, Vuln-ID|V-3454
Plugin: Windows
Control ID: 3a2890686cef4c9e526d60b204746a902e7e9d5ac55cbf3075a842b79eb0d38b