UCF STIG Viewer Logo

The amount of idle time required before suspending a session must be configured to 15 minutes or less.


Finding ID Version Rule ID IA Controls Severity
V-73659 WN16-SO-000220 SV-88323r1_rule Medium
Open sessions can increase the avenues of attack on a system. This setting is used to control when a computer disconnects an inactive SMB session. If client activity resumes, the session is automatically reestablished. This protects critical and sensitive network data from exposure to unauthorized personnel with physical access to the computer. Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109
Windows Server 2016 Security Technical Implementation Guide 2017-05-18


Check Text ( C-73741r1_chk )
If the following registry value does not exist or is not configured as specified, this is a finding.

Registry Path: \SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\

Value Name: autodisconnect

Value Type: REG_DWORD
Value: 0x0000000f (15) (or less)
Fix Text (F-80109r1_fix)
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Microsoft Network Server: Amount of idle time required before suspending session" to "15" minutes or less.