Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-3380 | 3.074 | SV-29528r1_rule | ECSC-1 | Medium |
Description |
---|
This setting controls whether or not users are forced to log off when their allowed logon hours expire. If logon hours are set for users, then this should be enforced. |
STIG | Date |
---|---|
Windows Vista Security Technical Implementation Guide | 2015-09-01 |
Check Text ( C-184r1_chk ) |
---|
Analyze the system using the Security Configuration and Analysis snap-in. Expand the Security Configuration and Analysis tree view. Navigate to Local Policies -> Security Options. If the value for “Network security: Force logoff when logon hours expire” is not set to “Enabled”, then this is a finding. |
Fix Text (F-142r1_fix) |
---|
Configure the system to log off users when their allowed logon hours expire. |