Title

Remote Desktop Services is configured to use a common temporary folder for all sessions. (Cat II impact)

Discussion

This setting controls the use of per session temporary folders or of a communal temporary folder. If this setting is enabled, only one temporary folder is used for all remoted desktop sessions. If a communal temporary folder is used, it might be possible for users to access other users temporary folders.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Temporary Folders “Do not use temporary folders per session” to “Disabled”.

Additional Identifiers

Rule ID: SV-25266r1_rule

Vulnerability ID: V-3455

Group Title: TS/RDS - Do Not Use Temp Folders

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.