Title

The system will be configured to prevent users from sharing clipboard content on their client computers with Remote Desktop Session Host that they access. (Remote Desktop Services Role) (Cat II impact)

Discussion

This check verifies that the system is configured to prevent users from sharing clipboard content on their client computers with Remote Desktop Session Host that they access.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Device and Resource Redirection “Do not allow clipboard redirection” to “Enabled”.

Additional Identifiers

Rule ID: SV-32500r1_rule

Vulnerability ID: V-15996

Group Title: TS/RDS – Clipboard Redirection

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.