Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host. (Remote Desktop Services Role).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15999	WN12-CC-000135	SV-52229r2_rule	ECSC-1	Medium

Description
Preventing the redirection of Plug and Play devices in Remote Desktop sessions helps reduce possible exposure of sensitive data.

STIG	Date
Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide	2017-04-28

Details

Check Text ( None )
None

Fix Text (F-45246r2_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Device and Resource Redirection -> "Do not allow supported Plug and Play device redirection" to "Enabled".