Windows 10 nonpersistent VM sessions must not exceed 24 hours.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-220738 | SRG-OS-000185-GPOS-00079 | WN10-00-000250 | SV-220738r958552_rule | 2025-02-25 | 3 |
| Description |
|---|
| For virtual desktop implementations (VDIs) where the virtual desktop instance is deleted or refreshed upon logoff, the organization should enforce that sessions be terminated within 24 hours. This would ensure any data stored on the VM that is not encrypted or covered by Credential Guard is deleted. |
| ℹ️ Check |
|---|
| Ensure there is a documented policy or procedure in place that nonpersistent VM sessions do not exceed 24 hours. If the system is NOT a nonpersistent VM, this is Not Applicable. If no such documented policy or procedure is in place, this is a finding. |
| ✔️ Fix |
|---|
| Set nonpersistent VM sessions to not exceed 24 hours. |