1.1.4.1 Configure 'Allow log on through Remote Desktop Services'

Information

This policy setting determines which users or groups have the right to log on as a Terminal Services client.

Solution

Restrict this user right to the Administrators group, and possibly the Remote Desktop Users group, to prevent unwanted users from gaining access to computers on your network by means of the Remote Assistance feature.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|16

Plugin: Windows

Control ID: 29f168f2f78e2633c945a227f87c59033d538e0682dfa6f4cc8fbcb70baaee4b