Only the default client printer must be redirected to the Remote Desktop Session Host. (Remote Desktop Services Role).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40204	WN12-CC-000136	SV-52163r2_rule	ECSC-1	Medium

Description
Allowing the redirection of only the default client printer to a Remote Desktop session helps reduce possible exposure of sensitive data.

STIG	Date
Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide	2019-10-03

Details

Check Text ( C-46955r1_chk )
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Microsoft\Windows NT\Terminal Services\ Value Name: RedirectOnlyDefaultClientPrinter Type: REG_DWORD Value: 1

Fix Text (F-45188r2_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Printer Redirection -> "Redirect only the default client printer" to "Enabled".