
Registry Path: \Software\Policies\Microsoft\Windows NT\Terminal Services\Ĭonfigure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Session Time Limits -> "Set time limit for disconnected sessions" to "Enabled", and "End a disconnected session" to "1 minute".

If the following registry value does not exist or is not configured as specified, this is a finding:

Remote Desktop Session Host role service on a computer running Windows Server 2012. Windows Server 2012 / 2012 R2 Member Server Security Technical Implementation Guide The built-in Windows Remote Desktop Connection (RDP) client ( mstsc. Such sessions use system resources and must be terminated as soon as possible.

This setting controls how long a session will remain open if it is unexpectedly terminated.
