Title

Terminal Services is not configured to set a time limit for disconnected sessions. (Cat II impact)

Discussion

This setting controls how long a session will remain open if it is unexpectedly terminated. Such sessions should be terminated as soon as possible.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> Sessions “Set Time Limit for Disconnected Sessions” to “Enabled”, and the “End a disconnected session” to “1 minute".

Additional Identifiers

Rule ID: SV-29104r1_rule

Vulnerability ID: V-3457

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.