[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

95906

 
 

909

 
 

77982

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-9764-2

Platform: win7Date: (C)2012-05-18   (M)2017-06-28



The Remote Desktop Services 'Set client connection encryption level' setting should be enabled or disabled as appropriate.


Parameter: enabled/disabled


Technical Mechanism: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Set client connection encryption level (2) Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\MinEncryptionLevel

References:

Resource IdReference
Microsoft Security Compliance Management Toolkit for Windows 7, Version 1.0: "Windows 7 Security Baseline Settings.xlsm" spreadsheetWorksheet: Computer Policy Settings; Row: 198
Microsoft Security Compliance Management Toolkit for Windows 7, Version 1.0: "Windows 7 Security Baseline.xml"Setting Index #271: This policy setting specifies whether the computer that is about to host the remote connection will enforce an encryption level for all data sent between it and the client computer for the remote session.
USGCB Beta 2010-08-31 XCCDF (USGCB-Windows-7-x86_xccdf.xml)Rule 'set_client_connection_encryption_level'
USGCB Beta 2010-08-31 OVAL (USGCB-Windows-7-x86_oval.xml)Definition 'oval:gov.nist.usgcb.windowsseven:def:276'
SCAP Repo OVAL Definitionoval:gov.nist.usgcb.windowsseven:def:21005
SCAP Repo OVAL Definitionoval:gov.nist.usgcb.windowsseven:def:276
BITS Shared Assessments SIG v6.0BITS Shared Assessments SIG v6.0
Jericho ForumJericho Forum
HIPAA/HITECH ActHIPAA/HITECH Act
FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL--FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL--
ISO/IEC 27001-2005ISO/IEC 27001-2005
COBIT 4.1COBIT 4.1
GAPP (Aug 2009)GAPP (Aug 2009)
NERC CIPNERC CIP
NIST SP800-53 R3NIST SP800-53 R3 SC-9
PCIDSS v2.0PCIDSS v2.0
FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL--FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL--
BITS Shared Assessments AUP v5.0BITS Shared Assessments AUP v5.0


CPE    1
cpe:/o:microsoft:windows_7
OVAL    2
oval:gov.nist.usgcb.windowsseven:def:21005
oval:gov.nist.usgcb.windowsseven:def:276
XCCDF    3
xccdf_nist_benchmark_Windows_7
xccdf_gov.nist_benchmark_USGCB-Windows-7
xccdf_org.secpod_benchmark_cip_std_ver3_Windows_7

© 2013 SecPod Technologies