Check: 5.047
Windows 2003 DC STIG:
5.047
(in version v6 r40)
Title
Terminal Services idle session time limit does not meet the requirement. (Cat II impact)
Discussion
This setting controls how long a session may be idle before it is automatically disconnected from the server. Users should disconnect if they plan on being away from their terminals for extended periods of time. Idle sessions should be disconnected after 15 minutes.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> Sessions “Set time limit for active but idle Terminal Services sessions” to “Enabled”, and the “Idle session limit” to 15 minutes or less, excluding 0 which equates to “Never”.
Additional Identifiers
Rule ID: SV-29106r1_rule
Vulnerability ID: V-3458
Group Title:
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001133 |
Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity. |
| CCI-002361 |
Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect. |