Terminal Services / Remote Desktop Service - Prevent password saving in the Remote Desktop Client.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-14247	5.116	SV-25258r1_rule		Medium

Description
This check verifies that the system is configured to prevent users from saving passwords in the Remote Desktop Client.

STIG	Date
Windows 7 Security Technical Implementation Guide	2018-02-12

Details

Check Text ( C-11593r1_chk )
If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows NT\Terminal Services\ Value Name: DisablePasswordSaving Type: REG_DWORD Value: 1

Fix Text (F-22926r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Connection Client “Do not allow passwords to be saved” to “Enabled”.