Title

Remote Desktop Services will be configured to use session-specific temporary folders. (Cat II impact)

Discussion

This setting controls the use of per session temporary folders or of a communal temporary folder. If this setting is enabled, only one temporary folder is used for all remote desktop sessions. If a communal temporary folder is used, it might be possible for users to access other users’ temporary folders.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Temporary Folders “Do not use temporary folders per session” to “Disabled”.

Additional Identifiers

Rule ID: SV-32492r1_rule

Vulnerability ID: V-3455

Group Title: TS/RDS - Do Not Use Temp Folders

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.