Title

Remote Desktop Services is not configured to set a time limit for disconnected sessions. (Cat II impact)

Discussion

This setting controls how long a session will remain open if it is unexpectedly terminated. Such sessions should be terminated as soon as possible.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Session Time Limits “Set time limit for disconnected sessions” to “Enabled”, and “End a disconnected session” to “1 minute".

Additional Identifiers

Rule ID: SV-25264r1_rule

Vulnerability ID: V-3457

Group Title: TS/RDS - Time Limit for Disc. Session

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.