CCE-35068-6Platform: win8.1 | Date: (C)2015-10-14 (M)2022-10-10 |
Do not allow passwords to be saved
Controls whether a user can save passwords using Remote Desktop Connection.
If you enable this setting the credential saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the RDP file will be deleted.
If you disable this setting or leave it not configured, the user will be able to save passwords using Remote Desktop Connection
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Connection Client!Do not allow passwords to be saved
(2) REG: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29691 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29691 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29691 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29691 |