290-Secure Server (Require Security)

Computer/User Node :

   MACHINE

Policy Path :

   Administrative Templates\Windows Components\Terminal Services\Encryption and Security\RPC Security Policy

Supported on :

   At least Microsoft Windows Server 2003

Help/Explain Text :

   Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to strengthen the security of RPC communication with clients by allowing only authenticated and encrypted requests. If the status is set to Enabled, the Terminal Server accepts requests from RPC clients that support secure requests, and does not allow unsecured communication with untrusted clients. If the status is set to Disabled, the Terminal Server always requests security for all RPC traffic. However, unsecured communication is allowed for RPC clients that do not respond to the request. If the status is set to Not Configured, unsecured communication is allowed. Note: The RPC interface is used for administering and configuring Terminal Services.

Registry Settings :

  HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic