Check: 5.226
Windows Vista STIG:
5.226
(in versions v6 r42 through v6 r41)
Title
Remote Assistance – Session Logging (Cat III impact)
Discussion
This check verifies that Remote Assistance log files will be generated.
Check Content
If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows NT\Terminal Services\ Value Name: LoggingEnabled Type: REG_DWORD Value: 1
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Remote Assistance “Turn on session logging” to “Enabled”.
Additional Identifiers
Rule ID: SV-16646r1_rule
Vulnerability ID: V-15707
Group Title: Remote Assistance – Session Logging
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |