Title

Terminal Services is not configured to set a time limit for disconnected sessions (Terminal Server Role). (Cat II impact)

Discussion

This setting controls how long a session will remain open if it is unexpectedly terminated. Such sessions should be terminated as soon as possible.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> Terminal Server -> Session Time Limits “Set Time Limit for Disconnected Sessions” to “Enabled”, and the “End a disconnected session” set to “1 minute".

Additional Identifiers

Rule ID: SV-29105r1_rule

Vulnerability ID: V-3457

Group Title: TS/RDS - Time Limit for Disc. Session

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.