bfb98113-cc94-400b-a385-af36657755f6
Saving passwords in the Remote Desktop Client could allow an unauthorized user to establish a remote desktop session to another system. The system must be configured to prevent users from saving passwords in the Remote Desktop Client. Satisfies:
Configure the policy value for:
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Remote Desktop Services
|_ Remote Desktop Connection Client
|_ Do not allow passwords to be saved to "Enabled".
STIG:
Server 2020: https://www.stigviewer.com/stig/microsoft_windows_server_2022/2022-08-25/finding/V-254365
Server 2019: https://www.stigviewer.com/stig/microsoft_windows_server_2019/2022-03-01/finding/V-205808 / https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93425
Server 2016: https://www.stigviewer.com/stig/microsoft_windows_server_2016/2022-03-01/finding/V-224944
Desktop:
W10: https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220848 /
W11: https://www.stigviewer.com/stig/microsoft_windows_11/2022-06-24/finding/V-253402
NIST 800-53: CM-6(a),IA-11
SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPOS-00156
MITRE Att&ck: T1021.001, T1563.002 Mitigations: M1028