| FSM-PO-SEC-C-Desktop-RDP_Hardening | |
| Data collected on: 2-9-2025 09:46:59 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\poincon.7-adm |
| Created | 19-6-2020 14:06:10 |
| Modified | 27-5-2024 10:35:12 |
| User Revisions | 1 (AD), 1 (SYSVOL) |
| Computer Revisions | 17 (AD), 17 (SYSVOL) |
| Unique ID | {03c8c827-833d-4142-b09d-b0a7e83bf202} |
| GPO Status | User settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/FR/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/MA/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/MG/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/TG/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/TN/Systems/Clients |
| Name |
|---|
| EMEA\FSM-L-SEC-GPO-Desktop-RDP_Hardening |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\FR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\FR-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\FSM-L-SEC-GPO-Desktop-RDP_Hardening | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Require use of specific security layer for remote (RDP) connections | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Server authentication certificate template | Enabled | |||||
| ||||||
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168 |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56 |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |