Title

Remote Desktop Services will delete temporary folders when a session is terminated. (Cat II impact)

Discussion

This setting controls the deletion of the temporary folders when the session is terminated. Temporary folders should always be deleted after a session is over to prevent hard disk clutter and potential leakage of information.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Temporary Folders “Do not delete temp folder upon exit” to “Disabled”.

Additional Identifiers

Rule ID: SV-32493r1_rule

Vulnerability ID: V-3456

Group Title: TS/RDS - Delete Temp Folders

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.