Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Windows Server 2025 "Deny log on through Remote Desktop Services" user right on domain controllers must be configured to prevent unauthenticated access.
Description
Discussion Text
Inappropriately granting user rights provides system, administrative, and other high-level capabilities.
The "Deny log on through Remote Desktop Services" user right defines the accounts that are prevented from logging on using Remote Desktop Services.
The Guests group must be assigned this right to prevent unauthenticated access.
The "Deny log on through Remote Desktop Services" user right defines the accounts that are prevented from logging on using Remote Desktop Services.
The Guests group must be assigned this right to prevent unauthenticated access.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.