UCF STIG Viewer Logo

Remote Desktop Services will be configured to use session-specific temporary folders.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3455 5.044 SV-32492r1_rule Medium
Description
This setting controls the use of per session temporary folders or of a communal temporary folder. If this setting is enabled, only one temporary folder is used for all remote desktop sessions. If a communal temporary folder is used, it might be possible for users to access other users’ temporary folders.
STIG Date
Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide 2019-06-18

Details

Check Text ( C-1899r1_chk )
If the following registry value doesn’t exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Subkey: \Software\Policies\Microsoft\Windows NT\Terminal Services\

Value Name: PerSessionTempDir

Type: REG_DWORD
Value: 1
Fix Text (F-28879r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Temporary Folders “Do not use temporary folders per session” to “Disabled”.