Check: 3.074
Windows 2003 DC STIG:
3.074
(in version v6 r40)
Title
The system is not configured to force users to log off when their allowed logon hours expire. (Cat II impact)
Discussion
This setting controls whether or not users are forced to log off when their allowed logon hours expire. If logon hours are set for users, then this should be enforced.
Check Content
Fix Text
Configure the system to log off users when their allowed logon hours expire.
Additional Identifiers
Rule ID: SV-29527r1_rule
Vulnerability ID: V-3380
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001133 |
Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| SC-10 |
Network Disconnect |