RDS Disclaimer Policy

[CommodoreS]

We have just set up RDS and would like to get staff to sign a disclaimer before using it.

 

I am struggling to find any templates we can use to base this of.

 

Does anyone know where I can find one or has one they could post?

[pete]

What's the purpose of the disclaimer above and beyond the AUP they've already signed?

 

Setting expectations for RDS availability/capability?

[CommodoreS]

Good question. Perhaps just updating the AUP will be sufficient, but is there anything anyone would add to that to reinforce usage of RDS specifically. Security concerns are the main thing that comes to mind at at the moment.

[pete]

Assuming staff users, I'd make 2FA a requirement with re-auth needed every X hours (and turn off any option to "remember this PC", to prevent saved credentials on shared home devices).

 

We use Duo (and yes, we are grandfathered into a rather good price) and have no complaints. If someone doesn't want to use 2FA, they don't get remote access.