Title

Terminal Services – Clipboard Redirection (Terminal Server Role). (Cat II impact)

Discussion

This check verifies that the system is configured to prevent users from sharing clipboard content on their client computers with Terminal Servers that they access.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> Terminal Server -> Device and Resource Redirection “Do not allow clipboard redirection” to “Enabled”.

Additional Identifiers

Rule ID: SV-16940r1_rule

Vulnerability ID: V-15996

Group Title: TS/RDS – Clipboard Redirection

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.