Windows 10 Security Technical Implementation Guide

The Windows 10 Security Technical Implementation Guide (V2 R3) has 257 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

257STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Mon Nov 01 2021

Windows 10 non-persistent VM sessions should not exceed 24 hours.

Windows 10 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows 10 non-persistent VM sessions should not exceed 24 hours.

Description

Discussion Text

For virtual desktop implementations (VDIs) where the virtual desktop instance is deleted or refreshed upon logoff, the organization should enforce that sessions be terminated within 24 hours. This would ensure any data stored on the VM that is not encrypted or covered by Credential Guard is deleted.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-220738

Rule

SV-220738r569187_rule

Severity

medium

Rule Version

WN10-00-000250

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Ensure there is a documented policy or procedure in place that non-persistent VM sessions do not exceed 24 hours.

If there is no such documented policy or procedure in place, this is a finding.

Implementation Procedure

Fix Text

Set non-persistent VM sessions to not exceed 24 hours.

STIG check 42 of 257 in the Windows 10 STIG checklist

← Previous · V-220737Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.Next · V-220739 →Windows 10 account lockout duration must be configured to 15 minutes or greater.