Remote Desktop Services: Must be configured to set a time limit for disconnected sessions (Server 2012)


This setting controls how long a session will remain connected if it is unexpectedly terminated. Such sessions use system resources and pose a security risk. Disconnected sessions should be terminated after a certain time.

This stig applies only for Windows Server 2012


To configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Remote Desktop Services
|_ Remote Desktop Session Host
|_ Session Time Limits
|_ Set time limit for disconnected sessions To "Enabled", and "End a disconnected session" to "1 minute".

Remote desktop services disconnected sessions time out should be enabled and set to 1 Minute.

STIG Server 2012:
Server 2008: