Windows 11 non-persistent VM sessions must not exceed 24 hours.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-253295	WN11-00-000250	SV-253295r828969_rule		Medium

Description
For virtual desktop implementations (VDIs) where the virtual desktop instance is deleted or refreshed upon logoff, the organization must enforce that sessions be terminated within 24 hours. This would ensure any data stored on the VM that is not encrypted or covered by Credential Guard is deleted.

STIG	Date
Microsoft Windows 11 Security Technical Implementation Guide	2022-06-24

Details

Check Text ( C-56748r828967_chk )
Ensure there is a documented policy or procedure in place that non-persistent VM sessions do not exceed 24 hours. If there is no such documented policy or procedure in place, this is a finding.

Fix Text (F-56698r828968_fix)
Set non-persistent VM sessions to not exceed 24 hours.