CCE-36639-3Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
This policy setting allows Microsoft Windows to process user Group Policy settings asynchronously when logging on through Remote Desktop Services. Asynchronous user Group Policy processing is the default processing mode for Windows Vista and Windows XP.
By default, Window Server processes user Group Policy settings synchronously.
If you enable this policy setting, Windows applies user Group Policy settings asynchronously, when logging on through Remote Desktop Services.
If you disable or do not configure this policy setting, Windows Server applies user Group Policy settings synchronously.
Note: This policy setting applies only to computers running Remote Desktop Services.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemGroup Policy!Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSystem!ProcessTSUserLogonAsync
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.3 | Attack Vector: NETWORK |
Exploit Score: 2.8 | Attack Complexity: LOW |
Impact Score: 3.4 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: LOW |
| Availability: LOW |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27583 |